« Brief: Adobe upgrades Flash Player
News: Mac OS X research warns of stealthier attacks »

Bugtraq: paFileDB 3.1 Remote SQL Injection

paFileDB 3.1 Remote SQL Injection


Related Files:

  • http://packetstormsecurity.com/0707-exploits/pafiledb-sql.txt

    paFileDB version 3.6 suffers from a remote SQL injection vulnerability in search.php. Authored By pUm, h4si

  • http://packetstormsecurity.com/0502-advisories/PafileDB.txt

    PafileDB 3.1 Final is susceptible to full path disclosure and php injection bugs.  Homepage: http://www.PersianHacker.NET. Authored By devil_box

  • http://packetstormsecurity.com/0504-exploits/PaFileDB.txt

    PaFileDB versions 3.1 and below are susceptible to cross site scripting and SQL injection vulnerabilities.  Homepage: http://www.hackerscenter.com/. Authored By Diabolic Crab

  • http://packetstormsecurity.com/0311-exploits/_BSSADV-0000.txt

    Bugtraq Security Systems Security Advisory - Multiple vulnerabilities have been discovered in the Applied Watch Command Center IDS. Two exploits have been released to demonstrate these flaws. The first, appliedsnatch.c, allows a remote attacker to add a user to the console without having to authenticate to the system. The second, addrule.c, allows a remote attacker to add custom IDS alerts to all sensor nodes in a network, enabling a human denial-of-service attack by making good packets look bad. Related CVE Numbers: CAN-2003-0970, CAN-2003-0971.  Homepage: http://www.bugtraq.org. Authored By The Bugtraq Team

  • http://packetstormsecurity.com/0704-exploits/rspa-rfi.txt

    Really Simple PHP and Ajax, or RSPA, is susceptible to a remote file inclusion vulnerability. Version RSPA-2007-03-23 is susceptible.  Homepage: http://www.bugtraq.ir/. Authored By Hamid Ebadi

  • http://packetstormsecurity.com/docs/infosec/bugtraq.ids.thread.txt

    Complete archive of the excellent threads recently posted on the BugTraq mailing list regarding Intrusion Detection Systems. IDS theories, implementations, problems, and reviews of commercial products are among the topics covered.

  • http://packetstormsecurity.com/0702-exploits/zpanel.txt

    ZPanel suffers from a remote file inclusion vulnerability.  Homepage: http://www.bugtraq.ir/. Authored By Hamid Ebadi

  • http://packetstormsecurity.com/0704-advisories/pico-traverse.txt

    Acubix PicoZip version 4.02 suffers from a directory traversal vulnerability.  Homepage: http://www.bugtraq.ir/. Authored By Hamid Ebadi

  • http://packetstormsecurity.com/0707-advisories/t1lib.txt

    T1Lib suffers from a buffer overflow vulnerability.  Homepage: http://www.bugtraq.ir/. Authored By Hamid Ebadi

  • http://packetstormsecurity.com/0704-exploits/exponent-multi.txt

    Exponent CMS versions 0.96.6-Alpha and below are susceptible to directory traversal and cross site scripting vulnerabilities.  Homepage: http://www.bugtraq.ir/. Authored By Hamid Ebadi

    • This entry was posted on Thursday, April 10th, 2008 at 7:00 am and is filed under Cross Site Scripting (XSS), Excel, File Inclusion, Google, Host Intrusion Detection Systems, Host Intrusion Prevention Systems, Network Intrusion Detection Systems, Network Intrusion Prevention Systems, PHP, SQL Injection, Vulnerabilities, Web Attacks. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

    Leave a Reply

    You must be logged in to post a comment.