alitalk Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/alitalk/ Sun, 26 Feb 2023 09:08:31 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png alitalk Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/alitalk/ 32 32 CVE-2008-0371 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0371/ Sun, 26 Feb 2023 09:08:31 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0371/ Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via (2) the id parameter to (b) inc/usercp.php, related to functionz/usercp.php; or (3) the username parameter to (c) […]

The post CVE-2008-0371 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via (2) the id parameter to (b) inc/usercp.php, related to functionz/usercp.php; or (3) the username parameter to (c) admin/index.php, related to functionz/first_process.php, or (d) index.php. NOTE: some of these details are obtained from third party information.

The post CVE-2008-0371 appeared first on CVE Vulnerability.

]]> CVE-2008-0391 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0391/ Sun, 26 Feb 2023 09:08:31 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0391/ inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters.

The post CVE-2008-0391 appeared first on CVE Vulnerability.

]]> inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters.

The post CVE-2008-0391 appeared first on CVE Vulnerability.

]]>