7215 matches found
phpWebSite <= 0.10.2 (hub_dir) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHPWebSite = 0.10.2 remote cmmnds xctn\r\n; echo - arbitrary local inclusion, works with magicquotesgpc = Off\r\n; echo by rgod, mail: [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; if $argc4...
SaveWebPortal <= 3.4 (page) Remote File Inclusion Vulnerability
No description provided by source. -------------------------------------------- SaveWebPortal = 3.4page Remote File Inclusion Vulnerability Download:http://www.circeos.it/frontend/theme4/index.php?page=downloads -------------------------------------------- Found by x0rax [email protected]...
Hyena Cart (index.php) SQL Injection Vulnerability
No description provided by source. Hyena Cart index.php Sql Injection Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://hyenacart.com/ .:. Dork : This store is powered by Hyena Cart .:. Home :...
The Merchant <= 2.2.0 (index.php show) Remote File Inclusion Exploit
No description provided by source. html head meta http-equiv=Content-Type content=text/html; charset=windows-1254 title2005-2006 The Merchant Project Remote File Include Exploit/title script language=JavaScript...
Vtiger CRM 5.4.0 (index.php, onlyforuser param) - SQL Injection
No description provided by source...
Invision Power Board 2.0 Index.PHP Post Action SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11703/info A remote SQL injection vulnerability affects Inivision Power Board. This issue is due to a failure of the application to properly validate user-supplied input prior to using it in an SQL query. An attacker may...
VBulletin 1.0.1 lite/2.x/3.0 /admincp/index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...
MyMarket 1.71 (index.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ====================================================...
Back-End CMS 0.4.5 admin/index.php includes_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary...
ToendaCMS 0.7 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scri...
724CMS Enterprise 4.59 - (section.php) SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------- 724CMS Enterprise Version 4.59 section.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author:...
NovaBoard <= 1.0.1 (message) Persistent XSS Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NovaBoard = 1.0.1 / XSS Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: NovaBoard $ Version: = 1.0.1 $ File affected: index.php $ Download: http://www.novaboard.net/ Found by Pepelux pepeluxatenye-sec.org...
SWSoft Confixx 3.0.6/3.0.8/3.1.2 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17476/info Confixx is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...
Oreon <= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...
Nuked-Klan 1.3 - Multiple Cross Site Scripting Vulnerabilities
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '76085' ssvid version = '1.0' author = 'Disorder' vulDate = '2003-12-31' createDate =...
Koobi CMS 4.2.4/4.2.5/4.3.0 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0, 4.2.5, 4.2.4 Multiple Remote SQL Injection +==-- --==+====================================================================================+==-- +...
k_fileManager <= 1.2 (dwl_include_path) Remote Inclusion Vulnerability
No description provided by source. ================================================================= KfileManager v1.2 = dwlincludepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site :...
PHP-Nuke Dance Music Module Index.PHP Local File Include Vulnerability
No description provided by source...
VideoCMS 3.1 - SQL Injection Vulnerability
No description provided by source. VideoCMS SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 14, 2009 Software Information + Vendor : http://www.codemight.com/ + version : 3.1 or lower maybe also affected + Vulnerabilit...
Simplog 0.9.3 BlogID Parameter Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20899/info Simplog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...