7215 matches found
MarmaraWeb E-commerce index.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15875/info E-commerce is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
PlaySMS Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15928/info PlaySmS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
PHP Charts 1.0 (index.php, type param) - Remote Code Execution
No description provided by source. !/usr/bin/python Original Advisory came from: http://packetstormsecurity.com/files/119582/PHP-Charts-1.0-Code-Execution.html infodox - insecurety.net import requests import random import threading import sys def genpayloadhost, port: Perl Reverse Shell Generator...
Joomla Component Nice Talk <= 0.9.3 (tagid) SQL Injection Vulnerability
No description provided by source. Title : Joomla Component Nice Talk = 0.9.3 tagid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.azrul.com $$ : ?? Dork : inurl:index.php?option=comnicetalk DorkEx :...
AllMyGuests <= 0.3.0 (AMG_serverpath) Remote Inclusion Vulnerabilities
No description provided by source. AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php /include/cmsubmit.inc.php...
Deep CMS 2.0 Index.PHP Remote File Include Vulnerability
No description provided by source...
mcGallery 1.1 - index.php lang Parameter XSS
No description provided by source...
CMS Openpage (index.php) SQL Injection Vulnerability
No description provided by source. ==================================================== CMS Openpage index.php SQL Injection Vulnerability ==================================================== + Discovered by: Phenom + My id: http://inj3ct0r.com/author/2157 + Original:...
webYourPhotos <= 6.05 - (index.php) Remote File Inclusion Vulnerability
No description provided by source...
PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities
No description provided by source. Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal...
myBloggie 2.1.5 index.php PATH_INFO Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22097/info MyBloggie is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...
Nucleus CMS 3.0.1 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source...
Preisschlacht 4.0 Flash System - SQL Injection (seite&aid) index.php
No description provided by source...
LokiCMS <= 0.3.4 (index.php page) Arbitrary Check File Exploit
官网链接: http://www.lokicms.com/ 影响版本:= 0.3.4 概述: LokiCMS 0.3.4及之前版本中的index.php存在目录遍历漏洞。当magicquotesgpc被中止时,远程攻击者可以借助页参数中的"..",来检查任意文件是否存在。 漏洞页面: vuln file: index.php 漏洞代码: if isset $GET && isset $GET'page' $pagename = stripslashes trim $GET'page' ; // load the page if $pagename == '' $name =...
Synergiser 1.2 Index.PHP Local File Include Vulnerability
No description provided by source...
YourArcadeScript 2.4 (index.php id parameter) SQL Injection
No description provided by source. Exploit Title: YourArcadeScript 2.4 SQLi Vulnerability Version: 2.4 Date: 17/08/2012 Author: DaOne LCA Software Link: http://www.yourarcadescript.com Google Dork: intext:Powered by YourArcadeScript 2.4 Exploit http://localhost/index.php?act=cat&id=Error Based...
TNT Forum 0.9.4 - Local File Inclusion Vulnerabilities
No description provided by source. ====================================================== TNT Forum 0.9.4 Local File Inclusion Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Joomla Component com_otzivi Blind SQL Injection Vulnerability
No description provided by source. ------------------- header data start ------------------- Joomla Component comotzivi Blind SQL Injection Vulnerability Author : Cyber945 Home : Ar-ge.Org Greetz : By.Danger,D3xer,LionTurk and All Ar-ge.Org Members Not3 : Ar-ge.Org Online Name : comotzivi Bug Typ...
SIMM Management System (SMS) Local File Inclusion Vulnerability
No description provided by source. =================================================================================================== o SIMM Management System SMS Local File Inclusion Vulnerability Software : SIMM Management System SMS version 2 Vendor :...
TxtBlog (index.php m) 1.0 Alpha - Local File Inclusion Vulnerability
No description provided by source. ============================================================ TxtBlog index.php m Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Undergroun...