Oracle Secure Backup Administration Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to inject arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability but may be bypassed. The specific flaw exists in the handling of the 'preauth' variable to the script index.php use...

BigThink XT (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== BigThink XT index.php SQL Injection Vulnerability =================================================== /\ \ /\ \ /\ \ /'\ /\ /\ /\ \ /\ \ /\ \ \ ,\L\//\ / \ \ \ /\L\ \ \ \ \ \ /\//\ /...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

Sardus (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Sardus index.php Blind SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

CVE-2009-4934

Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

LojaDoSite Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ LojaDoSite Blind SQL Injection Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Joomla Component com_sef LFI Vulnerability

Exploit for php platform in category web applications ========================================== Joomla Component comsef LFI Vulnerability ========================================== Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomsef.zip Version: 0 Tested on: all OS CVE : 0...

Sandbox 2.0.2 - Local File Inclusion

: Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: + PoC:http://localhost/index.php?a=../../../../../etc/passwd%00...

Sandbox v2.0.2 Local FIle Inclusion Vulnerability

Exploit for php platform in category web applications ================================================= Sandbox v2.0.2 Local FIle Inclusion Vulnerability ================================================= : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.co...

Sandbox 2.0.2 - Local File Inclusion

Sandbox 2.0.2 - Local File Inclusion : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: +...

CVE-2010-2613

Cross-site scripting XSS vulnerability in the JExtensions JE Awd Song comawdsong component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, which is not properly handled in a view action to index.php...

CVE-2010-1522

Multiple SQL injection vulnerabilities in the BookLibrary Basic combooklibrary component 1.5.3 before 1.5.320100620 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid parameter in a 1 lendrequest or 2 savelendrequest action to index.php, the id parameter in a 3...

InteRa CMS (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== InteRa CMS index.php Blind SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Ecomat CMS - SQL Injection

Ecomat CMS - SQL Injection Vulnerability ID: HTB22390 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinecomatcms.html Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor Notification: 18 May 2010 Vulnerability Type: SQL...

CVE-2010-2514

Cross-site scripting XSS vulnerability in the JFaq comjfaq component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action to index.php...

Clix'N'Cash Clone 2010 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/41202/info Clix'N'Cash Clone 2010 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

PageDirector CMS - Multiple Vulnerabilities

PageDirector CMS - Multiple Vulnerabilities Exploit Title : PageDirector CMS Multiple Vulnerabilities Date : 20 - 6 - 2010 Author : Tr0y-x Vendor : www.customerparadigm.com Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM Price : 675.00 $ loooooolz -== SQL Injection Vulenrability =...

WAFER (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== WAFER index.php Blind SQL Injection Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /...

CVE-2010-2457

Cross-site scripting XSS vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script or HTML via the term parameter...

CVE-2010-2457

Technical details beyond the basic XSS description are not publicly available in the provided connected documents. CVE-2010-2457 is described as XSS in K-Search index.php via the term parameter; monitor for updates for fixes or affected versions.