CVE-2014-3992

Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary SQL commands via the 1 entity parameter in an update action to user/fiche.php or 2 sortorder parameter to user/group/index.php...

CVE-2014-3991

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dolusejmobile, 2 doloptimizesmallscreen, 3 dolnomousehover, 4 dolhidetopmenu, 5 dolhideleftmenu, 6 mainmenu, or 7 leftmenu parameter to index.php; th...

CVE-2014-4850

SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter...

Sql injection

SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter...

maccms 8 /index.php SQL注入漏洞

No description provided by source...

cmseasy 反射型XSS无视浏览器filter无视360webscan

简要描述： RT，cmseasy后台是可以csrf getshell的。但我这里，就算以后cmseasy后台加token、验证referer，我也不怕了，反正是XSS，可以窃取token的，referer也是本站。 详细说明： 这个反射型XSS出在/bbs/index.php中，第4行： window.location.href='". strreplace'/bbs', '', $SERVER'REQUESTURI'."';"; requireonce 'bbspublic.php'; $category = dbbbscategory::getInstance;...

CVE-2014-4594

Cross-site scripting XSS vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2014-4593

CVE-2014-4593 is a cross-site scripting (XSS) vulnerability in the WP Plugin Manager (WP Plugin Manager) plugin for WordPress, specifically in wp-plugins-net/index.php up to version 1.6.4.b. The flaw allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Connecte...

CVE-2014-4169: BoltWire index.php file upload

BoltWire (vulnerable through /index.php) suffers from improper validation of uploaded filenames, allowing an attacker with valid credentials to upload a PHP file and rename it (e.g., file.php) to achieve remote code execution and complete compromise of the web application. Descriptions from 1337D...

Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= Voodoo chat 1.0RC1b = filepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://vochat.com/ | |...

Mambo Component Material Suche 1.0 - SQL Injection

No description provided by source. Mambo Component Material Suche 1.0 SQL injection Vulnerability Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Greetz: Manas58 Baybora Delibey Tiamo Psiko Turco infazci X-TRO Exploit:...

Adem 0.5.1 - Local File Inclusion

No description provided by source. ----------exploit Debut Local File Include Vulnerability ----------Script Info Author : JIKO ----------Script Info Site : https://github.com/4FSB/Adem && http://adem.faares.com/demo Version : 0.5.1 Download : https://codeload.github.com/4FSB/Adem/zip/master...

Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability

No description provided by source. scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

MercuryBoard 1.1 INDEX.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12503/info MercuryBoard is affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input before being used in SQL queries. The vulnerability is reported ...

IF-CMS Index.PHP Cross-Site Scripting Vulnerability

No description provided by source...

Bandersnatch 0.4 Index.PHP Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/26553/info Bandersnatch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

VBulletin 1.0.1 lite/2.x/3.0 /admincp/index.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...

slogan design Script SQL Injection Vulnerability

No description provided by source. Title: slogan design Script SQL Injection Vulnerability Version: 3.1 Author: Mr.P3rfekT Software Site: http://www.slogandesign.co.il Tested on Lunix CVE : N/A Founded By Mr.P3rfekT --- We Will Not Go Down Dork : inurl:index.php?mid= Helllo Allz. Exploit :...

CascadianFAQ <= 4.1 (index.php) Remote SQL Injection Vulnerability

No description provided by source. Title : CascadianFAQ = 4.1 index.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://eclectic-designs.com $$ : Free Dork : This FAQ is powered by CascadianFAQ DorkEx :...

Back-End CMS 0.4.5 admin/index.php includes_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary...