147 matches found
CVE-2008-4142
CVE-2008-4142 is a SQL injection vulnerability in E-Php CMS affecting article.php via the es_id parameter, allowing remote attackers to execute arbitrary SQL. The CVSSv2 base score is 7.5 (HIGH). The provided documents describe the vulnerability and its existence but do not detail a workaround or...
CVE-2008-4142
SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the esid parameter...
E-Php CMS (article.php es_id) Remote SQL Injection Vulnerability
No description provided by source. || | | E-Php CMS esid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-TY.CoM | www.tryag.cc | | email: darkangelg85atYahoo815com | | | | | | | | script : http://www.ephpscripts.c...
E-PHP CMS - article.php SQL Injection
E-PHP CMS - article.php SQL Injection E-Php Content Management System HaCkerEgy ; Contact : [email protected] Home : pal-hacker.com & atsdp.com =============================================== Script : E-Php Content Management System Download : http://www.ephpscripts.com...
Unfixed XSS vulnerability at www.e-personal.ru
Security researcher THEMILLER, has submitted on 22/06/2008 a cross-site-scripting XSS vulnerability affecting www.e-personal.ru, which at the time of submission ranked 381038 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...
CVE-2007-6134
SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the contentid parameter in an article action to include.php, a different vector than CVE-2006-1773...
PHPKIT 1.6.4pl1 - article.php SQL Injection
PHPKIT 1.6.4pl1 - article.php SQL Injection !/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t shadowleet Contact: [email protected] Phpkit 1.6.4pl1 Non Public Exploit by $hadowleet, Description: Vulnerability in file pkinc/public/article.php On line 71:...
PHPKIT 1.6.4pl1 article.php Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== PHPKIT 1.6.4pl1 article.php Remote SQL Injection Exploit ======================================================== !/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t...
PHPKIT 1.6.4pl1 - 'article.php' SQL Injection
!/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t shadowleet Contact: [email protected] Phpkit 1.6.4pl1 Non Public Exploit by $hadowleet, Description: Vulnerability in file pkinc/public/article.php On line 71: $contentid=!$contentid && isset$REQUEST'contentid' &&...
Cross site scripting
Cross-site scripting XSS vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titulo parameter in article.php...
phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit
No description provided by source. !-- phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploit Vulnerable Variable: itemid Vulnerable File: modules/news/article.php Vulnerable: phpMySpace Gold v8.10 other versions should also be vulnerable Google d0rk: "Powered by phpMySpace Gold 8.10" John...
CVE-2007-1965
Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...
Newsscript <= 0.5 Remote and Local File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================= Newsscript 2 3 27 include$filename; The second flaw is due to an input validation error in the "article.php" script that does not validate the "ide" parameter, which could be...
ACGV News <= v0.9.1 (PathNews) Remote File Inclusion Exploit
============================================================================================== ACGV News = v0.9.1 PathNews Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...
ACGV News 0.9.1 - article.php Remote File Inclusion
ACGV News 0.9.1 - article.php Remote File Inclusion ============================================================================================== ACGV News = v0.9.1 PathNews Remote File Inclusion Exploit...
ACGV News 0.9.1 - 'article.php' Remote File Inclusion
============================================================================================== ACGV News = v0.9.1 PathNews Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...
ACGV News <= 0.9.1 (PathNews) Remote File Inclusion Vulnerability
No description provided by source. ============================================================================================== ACGV News = v0.9.1 PathNews Remote File Inclusion Exploit =============================================================================================== Critical Leve...
Sql injection
Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to 1 friend.php or 2 article.php...
phpWebsite <= SQL Injection (friend.php) & (article.php)
+phpWebsite +DaBDouB-MoSiKaR Moroccan Security Team +creetz to: Moroccan security TeamDr.E-vil,Dr.Erase,H0550N,ToM-le-Magicianfrance , ameeregypt, Esp!onLeRaVaGe, CiM TeaM, xMs3D0,|ucifer,B6,al-houda membersnabil,sn!per,Kasparovand all hackers musilm morocco and www.lezr.com +special 10x to: safa...