House Style 0.1.2 - 'readfile()' Local File Disclosure

Exploit Title: House Style 0.1.2 = readfile Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/housestyle/ Version: 1.03 Category:: readfile Local File Disclosure Vulnerability2 Tested on: Xp SP 2 Ex : House Style...

nuBuilder - Remote File Inclusion

nuBuilder - Remote File Inclusion Software: nuBuilder 10.04.x and lowermaybe? Type: Remote File Inclusion Download: http://sourceforge.net/projects/nubuilder/files/ Author: Ahlspiess Email: [email protected] Vulnerable file: report.php report.php file content 1 ?php 2 / 3 File: report.php...

nuBuilder - Remote File Inclusion

Software: nuBuilder 10.04.x and lowermaybe? Type: Remote File Inclusion Download: http://sourceforge.net/projects/nubuilder/files/ Author: Ahlspiess Email: [email protected] Vulnerable file: report.php report.php file content 1 ?php 2 / 3 File: report.php 4 Author: nuSoftware 5 Created:...

nuBuilder Remote File inclusion Vulnerability

Exploit for php platform in category web applications ============================================= nuBuilder Remote File inclusion Vulnerability ============================================= Software: nuBuilder 10.04.x and lowermaybe? Type: Remote File Inclusion Download:...

Sql injection

SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4730

SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4730

The CVE-2009-4730 entry describes a SQL injection vulnerability in report.php of the x10 Adult Media Script 1.7. The vulnerability allows remote attackers to execute arbitrary SQL commands through the id parameter, enabling potential data exposure or modification. The connected documents confirm ...

CVE-2009-3533

SQL injection vulnerability in report.php in Meeting Room Booking System MRBS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the typematch parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in report.php in Meeting Room Booking System MRBS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the typematch parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-3533

CVE-2009-3533 : The Meeting Room Booking System (MRBS) is vulnerable in its reporting page, report.php, where the typematch parameter is not properly sanitized before being used in a SQL query. This allows remote attackers to inject arbitrary SQL and potentially read/modify data in the MRBS datab...

CVE-2009-3359

Multiple cross-site scripting XSS vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 important parameter to editprofile.php and 2 pid parameter to report.php...

Match Agency BiZ 1.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Match Agency BiZ 1.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.matchagency.biz/ Greetings : Mizoz,...

MRCGIGUY Hot Links (report.php id) Remote SQL Injection Vulnerability

No description provided by source. MRCGIGUY Hot Links SQL PHP report.php id Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note: Algerie 3-1 Egypt Exploit: ------ SQ...

MRCGIGUY Hot Links - 'report.php?id' SQL Injection

MRCGIGUY Hot Links SQL PHP report.php id Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note: Algerie 3-1 Egypt Exploit: ------ SQL INJECTION: -------------...

MRCGIGUY Hot Links - report.php?id SQL Injection

MRCGIGUY Hot Links - report.php?id SQL Injection MRCGIGUY Hot Links SQL PHP report.php id Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note: Algerie 3-1 Egypt...

CVE-2008-5778

SQL injection vulnerability in report.php in Free Links Directory Script FLDS 1.2a allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

CVE-2008-5778

CVE-2008-5778 affects Free Links Directory Script (FLDS) 1.2a. The vulnerability is in report.php, where the linkid parameter allows remote SQL command execution (SQL injection). This is a high-severity issue (CVSS 2.0 base score 7.5) with potential partial impact on confidentiality, integrity, a...

CVE-2008-4379

Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2008-4378

SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...