CVE-2008-3291

SQL injection vulnerability in index.php in AproxEngine aka Aprox CMS Engine 5.1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Aprox CMS Engine 'index.php' SQL注入漏洞

BUGTRAQ ID: 30295 CNCAN ID：CNCAN-2008072201 Aprox CMS Engine是一款基于PHP的WEB应用程序。 Aprox CMS Engine不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Aprox Portal Aprox CMS Engine 5.1.0.4 目前没有解决方案提供：...

CVE-2008-3254

CVE-2008-3254 describes a SQL injection in index.php of preCMS 1, where the attacker can supply a crafted id parameter in the UserProfil action to execute arbitrary SQL commands. The vulnerability arises in the web interface and is exploitable remotely with network access; no authentication is in...

CVE-2008-3250

The CVE-2008-3250 entry describes a SQL injection in Arctic Issue Tracker 2.0.0, exploitable through the filter parameter in index.php to remotely execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH). No specific patch/version details or exploits are provided in ...

Aprox CMS Engine 5.1.0.4 (index.php page) SQL Injection Vulnerability

No description provided by source...

preCMS v.1 (index.php page) Remote SQL injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

Aprox CMS Engine 5.1.0.4 (index.php page) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Aprox CMS Engine 5.1.0.4 index.php page SQL Injection Vulnerability ===================================================================== Viva IslaM Viva IslaM Remote SQ...

Cross-Site Scripting vulnerabilities in CNCat

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в CNCat. XSS: Уязвимости в add.php можно как через GET, так и через POST, search.php и index.php. http://site/add.php?description=3C/textarea3E3Cscript3Ealertdocument.cookie3C/script3E...

Aprox CMS Engine 5.1.0.4 - index.php SQL Injection

Aprox CMS Engine 5.1.0.4 - index.php SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability Aprox CMS Engine V5.1.0.4 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

Aprox CMS Engine 5.1.0.4 - 'index.php' SQL Injection

Viva IslaM Viva IslaM Remote SQL injection Vulnerability Aprox CMS Engine V5.1.0.4 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

precms-sql.txt

Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

CVE-2008-3201

CVE-2008-3201 involves multiple XSS vulnerabilities in Pagefusion 1.5. The issues affect index.php in Pagefusion 1.5, where unsanitized user input via the edit action can be injected through five parameters: acct_fname, acct_lname, PID, PGID, and rez. The underlying cause is insufficient input sa...

CVE-2008-3201

Multiple cross-site scripting XSS vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 acctfname and 2 acctlname parameters in an edit action, and the 3 PID, 4 PGID, and 5 rez parameters. NOTE: the provenance of this information is...

preCMS v.1 (index.php page) Remote SQL injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== preCMS v.1 index.php page Remote SQL injection Vulnerability ============================================================== Viva IslaM Viva IslaM Remote SQL injection...

preCMS 1 - 'index.php' SQL Injection

Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

preCMS 1 - index.php SQL Injection

preCMS 1 - index.php SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

CVE-2008-3192

Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2008-3185

Relative Real Estate Systems 3.0 and earlier are affected by an SQL injection in index.php, exploitable via the listing_id parameter in a listings action. Remote attackers can execute arbitrary SQL commands as described in CVE-2008-3185 records (NVD, CVE list). The connected documents provide vul...

WebCMS Portal Edition 'index.php' SQL注入漏洞

BUGTRAQ ID: 30204 CNCAN ID：CNCAN-2008071502 WebCMS Portal Edition是一款基于PHP的WEB应用程序。 WebCMS Portal Edition不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 WebCMS Portal Edition 目前没有解决方案提供： http://www.webcms.es/...

Wysi Wiki Wyg 1.0 (index.php c) Local File Inclusion Vulnerability

No description provided by source. --==+=========================================================+==-- --==+ Wizi Wiki Wig Local File Inclusion Vulnerability +==-- --==+=========================================================+==-- Discovered By: StAkeR [email protected] Discovered On: 10 Jul 200...