7229 matches found
Vtiger CRM 5.4.0 (index.php, onlyforuser param) - SQL Injection
No description provided by source...
Cybertek CMS Local File Include Vulnerability
No description provided by source. ======================================================= Cybertek CMS Local File Include Vulnerability ======================================================= Name: Cybertek CMS Local File Include Vulnerability Vendor: www.cybertek.co.za Date: 2010/05/16 Author:...
Wbb3 - Blind SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google:...
CuteNews 1.4.6 index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that...
ADN Forum <= 1.0b Insecure Cookie Handling Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum = 1.0b / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: adnforum $ Version: = 1.0b $ File affected: index.php $ Download:...
Joomla Component com_joomradio SQL injection vulnerability
No description provided by source. Joomla Component comjoomradio SQL injection vulnerability author:Mr.tro0oqy from community college email:[email protected] greetz:alzomer,Mr.ksoory,my bb ; dork: inurl:index.php?option=comjoomradio exp:...
TikiWiki Project 1.8 tiki-index.php comments_threshold Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...
PHPOutSourcing Zorum 3.x Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8388/info A cross-site scripting vulnerability has been reported in the index.php script of PHPOutSourcing Zorum. Because of this, an attacker may be able to execute HTML and script code in the browsers of target users in...
CuteNews (index.php?page) Local File Inclusion Vulnerability
No description provided by source. ========================================================== CuteNews page local File Inclusion Vulnerability ========================================================== vendor: http://cutephp.com/ Author: eidelweiss Contact: eidelweiss at windowslive dot com...
phpWebSite <= 0.10.2 (hub_dir) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHPWebSite = 0.10.2 remote cmmnds xctn\r\n; echo - arbitrary local inclusion, works with magicquotesgpc = Off\r\n; echo by rgod, mail: [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; if $argc4...
ToendaCMS 0.7 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scri...
Joomla Component com_na_content 1.0 - Blind SQL Injection Vulnerability
No description provided by source. Joomla Component comnacontent 1.0 Blind SQL Injection Vuln Author: xoron Exploit: /index.php?option=comnacontent&task=view&id=1 having 1=0 /index.php?option=comnacontent&task=view&id=1 having 1=1 or /index.php?option=comnacontent&task=view&id=1 and...
IMEDIA - (index.php) SQL Injection Vulnerability
No description provided by source. !usr/bin/perl -w use HTTP::Request; use LWP::UserAgent; system "cls"; print "\n"; print " @@ @@ @@@@@@ @@ @@ @@@@ @@@@@@@ @@ @@ @@@@@@@ @@@@@\n"; print " @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@\n"; print " @@ @@ @@ @@@ @@@@@@@@ @@ @@ @@ @@@@ @@@@@@ @@ @@\n";...
VietPHP admin/index.php language Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
webSPELL <= 4.01.02 (id) Remote Edit Topics Vulnerability
No description provided by source. +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | webSPELL = 4.01.02 id Remote Edit Topics Vulnerability | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos -...
WYYS 1.0 Index.PHP Cross Site Scripting Vulnerability
No description provided by source...
Bloq 0.5.4 index.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
Lizge V.20 Index.PHP Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19533/info Lizge is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing...