7252 matches found
CVE-2007-4028
CVE-2007-4028 affects Webspell 4.01.02. A vulnerability in index.php allows absolute path traversal, enabling remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. CVSS v2 base score 7.5 (HIGH): Network vector, no authentication, low attack compl...
CVE-2007-3968
index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name...
Sql injection
SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action...
Sql injection
SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter...
CVE-2007-3976
SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter...
CVE-2007-3976
CVE-2007-3976 affects bwired where SQL injection is possible in index.php via the newsID parameter. The underlying issue is improper handling of the newsID input, allowing remote attackers to craft arbitrary SQL commands. Impact is described as arbitrary SQL execution; the connected materials do ...
CVE-2007-3981
CVE-2007-3981 : SQL injection in index.php of WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action. Connected documents confirm the vulnerability details; no remediation or exploit status provided in the sources.
CVE-2007-3981
SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action...
CVE-2007-3976
SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter...
CVE-2007-3968
CVE-2007-3968 affects the dirLIST project prior to version 0.1.1. A remote attacker can cause disclosure of directory contents by issuing a crafted URL containing an excluded folder name. This yields partial confidentiality impact (C:N/I:N/A:L per CVSS v3.1) with network access and no authenticat...
articledir-rfi.txt
dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected] greetz:d3hydr8, whoami pace...
Article Directory - index.php Remote File Inclusion
Article Directory - index.php Remote File Inclusion dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected]...
Article Directory (index.php page) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Article Directory index.php page Remote File Inclusion Vulnerability ======================================================================...
Sql injection
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...
blogsite-sql.txt
--==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK:...
MD-Pro < 1.0.82 index.php topicid Parameter SQL Injection
Binary data 4143.prm...
Blog System 1.x - index.php?news_id SQL Injection
Blog System 1.x - index.php?newsid SQL Injection --==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHO...
Sql injection
Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the 1 date and 2 limit parameters to index.php, and other unspecified vectors...
