7229 matches found
Allomani Super Multimedia Library 2.5.0 - CSRF Vulnerability (Add Admin)
No description provided by source. Super Multimedia Library 2.5.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/mediascript.html === Exploit === form method=POST...
WMNews <= 0.2a (base_datapath) Remote Inclusion Vulnerability
No description provided by source. Advisory: WMNews Remote File Include Vulnerability Release Date: 2006/07/26 Author: uNfz Critical Level: High Contact: [email protected] Vendor: Warta Mikael -------------------- -------------------- Searching / Dork: allinurl: .php?Artid= allinurl: .php?ArtCat...
AllMyLinks <= 0.5.0 - (index.php) Remote File Include Vulnerability
No description provided by source. /\ AllMyLinks 0.5.0 ========================================================= Published : 2007-01-07 Remote: Yes Site: http://download.php-resource.net/AllMyLinks/AllMyLinks0.5.0.zip Author: GolDM Contact: [email protected]...
Joomla Component com_job (showMoreUse) SQL injection vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '67141' ssvid version = '1.0' author = 'hhxx' vulDate = '2009-12-08' createDate =...
dB Masters Multimedia's Content Manager 4.5 - SQL Injection Vulnerability
No description provided by source. =========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor : http://www.dbmasters.net...
Invision Power Services Invision Gallery 1.0.1/1.3 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13907/info Invision Gallery is affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script before using it in an SQL...
SimpCMS <= 04.10.2007 (site) Remote File Inclusion Vulnerability
No description provided by source. Bug Found By Dr.RoVeR --Arab48 Hacker Contact: [email protected] --- Script: SimpCMS Light Download: http://www.simpcms.com/light/normal/simp-cms-light.zip -- Bug File: index.php Bug code in line 31: include $site..php; -- Exploit:...
PHPPing 0.1 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7030/info A vulnerability has been reported in PHPPing that may allow remote attackers to execute commands on vulnerable systems. The vulnerability exists in the index.php script file. Some variables are not properly...
Thickbox Gallery 2 - (index.php ln) Local File Inclusion Vulnerability
No description provided by source. + Thickbox Gallery v2 Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Local File Inclusion PoC : http://127.0.0.1/path/index.php?ln=../../../../../../BOOTSECT.BAK%00 milw0rm.com 2009-04-27...
Zephyrus CMS (index.php) SQL Injection Vulnerability
No description provided by source. ==================================================== Zephyrus CMS index.php SQL Injection Vulnerability ==================================================== + Discovered by: Phenom + My id: http://inj3ct0r.com/author/2157 + Original:...
HLstats 1.34 Index.PHP Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based...
PHP Decoda 3.3.1 - Local File Inclusion
No description provided by source. Exploit Title: php-decoda local file inclusion Date: 16/06/2012 Author: Number 7 Software Link: http://milesj.me/code/php/decoda Version: 3.3.1 Tested on: linux Exp: http://localhost/milesj-php-decoda/index.php?view=../../../../../../../etc/passwd%00 Line 111 in...
PHPNuke 6.x Category Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9630/info It has been reported that PHPNuke may prone to a SQL injection vulnerability, due to insufficient sanitization user-supplied input. The problem is reported to exist in the $category variable contained within the...
CMS little (index.php term) 0.0.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w ========================================================== CMS little index.php term Remote SQL Injection Exploit ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...
SaveWebPortal <= 3.4 (page) Remote File Inclusion Vulnerability
No description provided by source. -------------------------------------------- SaveWebPortal = 3.4page Remote File Inclusion Vulnerability Download:http://www.circeos.it/frontend/theme4/index.php?page=downloads -------------------------------------------- Found by x0rax [email protected]...
yappa-ng index.php album Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/32623/info The 'yappa-ng' program is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...
SCMS 1 - (index.php p) Local File Inclusion Vulnerability
No description provided by source. --:local file include:-- --------------------------------- script:simple content management system v 1 ------------------------------------------------------- download from:http://futurekast.com/fcms/php/SCMSv1.zip...
ClanSphere 2011.3 (cs_lang cookie parameter) Local File Inclusion
No description provided by source. Exploit Title: ClanSphere 2011.3 cslang cookie parameter Local File Include Vulnerability Google Dork: Copyright 2012 Seitentitel. All rights reserved. || inurl:index.php?mod=clansphere Date: 10/22/2012 Author: Marco Tulio blkhtc0rp Vendor Homepage:...
Kayako ESupport 2.3 Index.PHP Multiple Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12868/info Kayako ESupport is prone to a cross-site scripting vulnerability. Multiple parameters of the 'index.php' script can be exploited to pass malicious HTML and script code to the application. This would occur in th...
RedBLoG 0.5 admin/index.php root_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20115/info The redblog application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...