PT-2014-6209

Name of the Vulnerable Software and Affected Versions PNP4Nagios versions prior to 0.6.23 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific URI paths, including "share/pnp/application/views/kohana error page.php" and...

PHPX 3.x admin/page.php CSRF Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly validate access to administrative command...

FaScript FaName 1.0 - (page.php) Remote SQL Injection Vulnerability

No description provided by source. FaScript FaName v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.hotscripts.com/Detailed/66472.html Injection Adress : http://Sitename/faname/page.php?id=SqL Code Help : In This Script Admin Username and Password Save in...

SnapProof (page.php) SQL Injection Vulnerability

No description provided by source. SnapProof page.php Sql Injection Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://www.snapproof.com/ .:. Dork : Created and powered by SnapProof === Exploit ===...

Izumi <= 1.1.0 (RFI/LFI) Multiple Include Vulnerability

No description provided by source. + Izumi = 1.1.0 RFI/LFI Multiple Include Vulnerability + Discovered by cr4wl3r cr4wl3r!linuxmail.org + Download : http://sourceforge.net/projects/izumi/files/ + Code : page.php requireonce$dirinstall . $dirsrc . common.php; + Example : x RFI :...

JShop E-Commerce Suite 3.0 - Page.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11003/info Reportedly the JShop E-Commerce Suite is affected by a cross-site scripting vulnerability in the 'page.php' script. This issue is due to a failure of the application to properly santitize user-supplied input. A...

RahnemaCo Page.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18435/info RahnemaCo is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver...

Ahhp Portal Page.PHP Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23658/info Ahhp Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and...

FaName 1.0 page.php name Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/30019/info FaName is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser ...

ES CmS 0.1 - SQL Injection Vulnerability

No description provided by source. ? Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: ...

MyPHPDating 1.0 - SQL Injection Vulnerability

No description provided by source. MyPHPDating 1.0 SQL Injection Vulnerability \ ==============================================\ Software : MyPHPDating version 1.0 \ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/ \ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get...

CVE-2014-1618

Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 pid parameter to products.php or id parameter to 3 page.php or 4 news.php...

CVE-2014-1618: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 pid parameter to products.php or id parameter to 3 page.php or 4 news.php...

PT-2014-2797

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.0.0 through 1.2.15 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via a project name. This occurs in the account sponsor page.php file...

Wordpress Newsletter Plugin 3.2.6 (alert) Reflected XSS Vulnerability

Summary Newsletter is the perfect WordPress plugin for creating real newsletters and mail marketing system on your WordPress blog. Description The plugin suffers from a XSS issue due to a failure to properly sanitize user-supplied input to the 'alert' GET parameter in the 'page.php' script...

Epop Studio XSS/SQL Injection Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

ES CmS 0.1 - SQL Injection

Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc :...

Sql injection

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

CVE-2012-5912: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

PT-2012-6193

Name of the Vulnerable Software and Affected Versions PicoPublisher version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to API endpoints such as "page.php" or "single.php". Recommendations For PicoPublisher version 2.0...