File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities =============================================================== | File Store PRO 3.2 Blind SQL Injection | || -...

1024 CMS <= 1.4.4 Multiple Remote/Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-027 Application: 1024 CMS Versions Affected: 1.4.3, 1.4.4 RFC Vendor URL: http://www.1024cms.com/...

Sql injection

SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2008-1646

CVE-2008-1646 is an SQL injection vulnerability in the WordPress plugin WP-Download 1.2 , affecting the file wp-download.php via the dl_id parameter. The underlying issue is improper handling of input leading to arbitrary SQL execution by remote attackers. Public details in the connected document...

Directory traversal

Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitrary files via a .. dot dot in the url parameter...

Directory traversal

Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases TRUC 0.11.0 allows remote attackers to read arbitrary files via a .. dot dot in the uploadfilename parameter...

CVE-2008-0814

CVE-2008-0814 describes a directory traversal in TRUC (Tracking Requirements & Use Cases) 0.11.0. The vulnerability affects download.php where the upload_filename parameter can be tainted with .. to read arbitrary files, enabling an attacker to disclose file contents. The issue is rooted in a mis...

XPWeb 3.3.2 (Download.php url) Remote File Disclosure Vulnerability

No description provided by source. XPWeb 3.3.2 Download.php url Remote File Disclosure Vulnerability http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWebv3.3.2.tgz POC : /XPWebv3.3.2/Download.php?url=Config.inc.php /XPWebv3.3.2/Download.php?url=../../../../../../../etc/passwd Dorks :...

truc-disclose.txt

TRUC 0.11.0 download.php Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/truc/truc0.11.0.tar.gz POC : /download.php?uploadfilename=configinc.php /download.php?uploadfilename=../../../../../../../../etc/passwd Dork : TRUC 0.11.0 :: © 2006 by ASDIS : I'm TRYAGI ; -...

XPWeb 3.3.2 - url Remote File Disclosure

XPWeb 3.3.2 - url Remote File Disclosure XPWeb 3.3.2 Download.php url Remote File Disclosure Vulnerability http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWebv3.3.2.tgz POC : /XPWebv3.3.2/Download.php?url=Config.inc.php /XPWebv3.3.2/Download.php?url=../../../../../../../etc/passwd Dorks :...

XPWeb 3.3.2 - 'url' Remote File Disclosure

XPWeb 3.3.2 Download.php url Remote File Disclosure Vulnerability http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWebv3.3.2.tgz POC : /XPWebv3.3.2/Download.php?url=Config.inc.php /XPWebv3.3.2/Download.php?url=../../../../../../../etc/passwd Dorks : intitle:XPWeb 3.3.2 intitle:XPWeb 3.0.1 I'm...

XPWeb 3.3.2 (Download.php url) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== XPWeb 3.3.2 Download.php url Remote File Disclosure Vulnerability =================================================================== XPWeb 3.3.2 Download.php url Remote...

TRUC 0.11.0 (download.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== TRUC 0.11.0 download.php Remote File Disclosure Vulnerability =============================================================== TRUC 0.11.0 download.php Remote File Disclosure...

TRUC 0.11.0 - download.php Remote File Disclosure

TRUC 0.11.0 - download.php Remote File Disclosure TRUC 0.11.0 download.php Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/truc/truc0.11.0.tar.gz POC : /download.php?uploadfilename=configinc.php /download.php?uploadfilename=../../../../../../../../etc/passwd Dork...

TRUC 0.11.0 - 'download.php' Remote File Disclosure

TRUC 0.11.0 download.php Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/truc/truc0.11.0.tar.gz POC : /download.php?uploadfilename=configinc.php /download.php?uploadfilename=../../../../../../../../etc/passwd Dork : TRUC 0.11.0 :: © 2006 by ASDIS : I'm TRYAGI ; ...

CVE-2007-6653

The CVE-2007-6653 entry describes a Directory traversal vulnerability in Mihalism Multi Host 2.0.7, affecting the download.php script. The vulnerability allows remote attackers to read arbitrary files by manipulating the file parameter with a .. (dot dot) sequence. Documented impact is read acces...

Mihalism Multi Host 2.0.7 download.php Remote File Disclosure Vuln

No description provided by source. &nbs...

Mihalism Multi Host 2.0.7 - 'download.php' Remote File Disclosure

Mihalism Multi Host v2.0.7 download.php Remote File Disclosure Vuln Script Page : : POC : /Script/download.php?file=../../../../../../../../../../../etc/passwd D0rkS : Powered by Mihalism Multi Host v2.0.7 Powered by Mihalism Multi Host v2.0.5 Powered by Mihalism Multi Host v2.0.4 Powered by...

Sql injection

Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the 1 categorie parameter to catdownload.php, or the id parameter to 2 download.php or 3 hitcounter.php...

SQL injection - GestDownV1.00Beta

catdownload.php line 16 $sql = 'SELECT FROM downloads WHERE categorie='.$categorie.''; download.php line 6 mysqlquery'SELECT FROM downloads WHERE categorie=' . $GET'id'; hitcounter.php line 15 $requete = "SELECT lien FROM downloads WHERE id=$id"; download: http://www.01php.com/fiche-scripts-148.h...