CVE-2010-4280

Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via 1 the idgroup parameter in an operation/agentes/veragente action to ajax.php or 2 the groupid parameter in an operation/agentes/estadoagente action to index.ph...

CVE-2010-4360

CVE-2010-4360 refers to multiple SQL injection vulnerabilities in Jurpopage 0.2.0, exploitable via the (1) note and (2) pg parameters in index.php, per the initial description and corroborating Red Hat entries. The connected documents confirm the same vulnerability pattern and provide no details ...

ecshop v2. 7 2 demo/index. php file getshell vulnerabilities-vulnerability warning-the black bar safety net

//------------------------------------------------------------- Release date: 2010-11. 2 6 Publishing author: xhming Affected version: ecshop v2. 7 2 Official address: Vulnerability type: code execution Vulnerability description: Vulnerability analysis: demo/index.php if ! empty$POST'lang'...

C&PR Studio <= (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== C&PR Studio Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Memb...

Voxpopulime CMS <= (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Voxpopulime CMS Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout...

Sql injection

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

CVE-2010-4298

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

C&PR Studio SQL Injection

================================================================ C&PR Studio Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Voxpopulime CMS SQL Injection

================================================================ Voxpopulime CMS Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Pecio CMS 'target' Parameter Cross Site Scripting Vulnerability

The host is running Pecio CMS and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbpeciocmsxssvuln.nasl 5794 2017-03-30 13:52:29Z cfi $ pecio cms 'target' Parameter Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Arabian Youtube Script Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Arabian Youtube Script Blind SQL Injection Vulnerability ======================================================== =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The...

CVE-2010-4268

SQL injection vulnerability in the Pulse Infotech Flip Wall comflipwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Nuked-Klan Module Boutique Blind SQL Injection

Exploit for php platform in category web applications ============================================== Nuked-Klan Module Boutique Blind SQL Injection ============================================== Exploit Title: module boutique nuked klan Google Dork: inurl:index.php?file=Boutique Date: 15/11/2010...

Nuked-klaN Module Boutique - Blind SQL Injection

Nuked-klaN Module Boutique - Blind SQL Injection Exploit Title: module boutique nuked klan Google Dork: inurl:index.php?file=Boutique Date: 15/11/2010 Author: AR51Kevinos index.php?file=Boutique&op=cat&catid='...

Spaziottantotto Local File Inclusion

In The Name Of GOD + Exploit Title: spaziottantotto Local File Inclusion Vulnerability + Date: 2010-11-14 + Author : Cru3l.b0y + Software Link: http://spazio88.com/web.php + Price : 250 euro + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad,...

Webmatic - 'index.php' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Webmatic...

Joomla Component (com_markt) SQL Injection Vulnerability

No description provided by source. Joomla Component commarkt SQL Injection Vulnerability Author : CoBRa21 Dork : inurl:commarkt Sql Injection : http://localhost/path/index.php?option=commarkt&page=showcategory&catid=7+union+select+0,1,password,3,4,5,username,7,8+from+josusers-- Thanks...

SQL injection in eoCMS

Vulnerability ID: HTB22675 Reference: http://www.htbridge.ch/advisory/sqlinjectionineocms.html Product: eoCMS Vendor: eocms.com http://eocms.com Vulnerable Version: 0.9.04 Vendor Notification: 21 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

CVE-2010-4155

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to 2 modules/news/archive.php, 3 modules/news/topics.php, and 4...

CVE-2010-4097

Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...