PT-2013-1480

Name of the Vulnerable Software and Affected Versions Featurific For WordPress plugin version 1.6.2 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the snum parameter in the cached image.php file...

Lc Flickr Carousel 1.0 - Local File Disclosure

Exploit Title: Lc Flickr Carousel V1.0 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list Version: 1.0 Category:: Local File Disclosure Vulnerability2 Tested on: Xp SP 2 Ex : Lc Flickr Carousel...

Raw CMS Cross Site Scripting

Exploit Title : Raw Cross Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://www.weareraw.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Design by Raw"...

Art And Soul Design SQL Injection

Exploit Title: Art And Soul Design SQL Injection Vulnerability Date: 18/01/2012 - 04.24 Author: 3spi0n Software Website: http://www.artandsoul.co.uk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: image.php $ Demo Sites: www.the-picture-box.co.uk/image.php?id=2" SQL...

Ruubikcms 1.1.0 - extraimage.php Local File Inclusion

Ruubikcms 1.1.0 - extraimage.php Local File Inclusion Exploit Title: Ruubikcms v 1.1.0 /extra/image.php Local File Inclusion Vulnerability Date: 2011/10/16 Author: Sangyun YOO Software Link: http://ruubikcms.com/ruubikcms/download.php?f=ruubikcms110.zip Version: Ruubikcms v 1.1.0 Tested on: Windo...

Ruubik CMS 1.1.0 Local File Inclusion

Exploit Title: Ruubikcms v 1.1.0 /extra/image.php Local File Inclusion Vulnerability Date: 2011/10/16 Author: Sangyun YOO Software Link: http://ruubikcms.com/ruubikcms/download.php?f=ruubikcms110.zip Version: Ruubikcms v 1.1.0 Tested on: Windows 7 Starter K ---------------------------------------...

Ruubikcms 1.1.0 - '/extra/image.php' Local File Inclusion

Exploit Title: Ruubikcms v 1.1.0 /extra/image.php Local File Inclusion Vulnerability Date: 2011/10/16 Author: Sangyun YOO Software Link: http://ruubikcms.com/ruubikcms/download.php?f=ruubikcms110.zip Version: Ruubikcms v 1.1.0 Tested on: Windows 7 Starter K ---------------------------------------...

Ruubikcms v 1.1.0 (/extra/image.php) Local File Inclusion

Exploit for php platform in category web applications Exploit Title: Ruubikcms v 1.1.0 /extra/image.php Local File Inclusion Vulnerability Date: 2011/10/16 Author: Sangyun YOO Software Link: http://ruubikcms.com/ruubikcms/download.php?f=ruubikcms110.zip Version: Ruubikcms v 1.1.0 Tested on: Windo...

Sql injection

SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4909

Multiple cross-site scripting XSS vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or the 2 image parameter to image.php...

PT-2011-1841

Name of the Vulnerable Software and Affected Versions Zenphoto versions 1.3 through 1.3.1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the a parameter in the full-image.php file within the zp-core component. Recommendations For Zenphoto...

CVE-2010-4906: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information...

PT-2011-1844

Name of the Vulnerable Software and Affected Versions PaysiteReviewCMS version 1.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the "q" parameter to the...

CVE-2010-4909: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or the 2 image parameter to image.php...

dz7. 2 HTTP header injection vulnerability-vulnerability warning-the black bar safety net

dz7. 2 HTTP header injection vulnerability 20107/7/, the dz7. 2 header injection vulnerability 20107/7/ image.php to: header header'location: '.$ boardurl.$ thumbfile; $boardurl = htmlspecialchars'http://'.$ SERVER'HTTPHOST'. pregreplace"//+api|archiver|wap?/$/ i", ", substr$PHPSELF, 0,...

SaurusCMS <=upd 4.7.1 Multiple Remote File Inclusion

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

PT-2011-2622

Name of the Vulnerable Software and Affected Versions PivotX versions prior to 2.2.3 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the image parameter in the pivotx/modules/module image.php file. Recommendations For...

PT-2011-2624

Name of the Vulnerable Software and Affected Versions PivotX version 2.2.2 Description The issue allows remote attackers to obtain sensitive information via a non-existent file in the image parameter. This is achieved by exploiting the pivotx/modules/module image.php file, which reveals the...

PT-2010-5601

Name of the Vulnerable Software and Affected Versions FeedList plugin version 2.61.01 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the i parameter in the feedlist/handler image.php file. Recommendations For FeedList plugin version...

PaysiteReviewCMS - image.php Cross-Site Scripting

PaysiteReviewCMS - image.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43213/info Mechanical Bunny Media PaysiteReviewCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues...