Camiro-CMS_beta-0.1 - FCKeditor Arbitrary File Upload

Camiro-CMSbeta-0.1 - FCKeditor Arbitrary File Upload ?php / ----------------------------------------------------------------- Camiro-CMSbeta-0.1 fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- Download :...

CVE-2010-1113

Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...

CVE-2010-1114

CVE-2010-1114 describes multiple PHP remote file inclusion vulnerabilities in the Web Server Creator – Web Portal 0.1. An attacker can trigger code execution by supplying a URL to the (1) pg parameter in index.php and (2) the path parameter to news/form.php. The underlying root cause is inclusion...

CVE-2010-1113

CVE-2010-1113 describes a cross-site scripting (XSS) vulnerability in the forum page of Web Server Creator - Web Portal 0.1 . Remote attackers can inject arbitrary web script or HTML via unspecified vectors to index.php . The NVD-record indicates a MEDIUM severity (CVSSv2 base score 4.3) with par...

HoMaP-CMS 0.1 SQL Injection

Exploit Title: HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability Date: 17/04/2007 Author: Pr0T3cT10n Software Link: SourceForge.net Version: 0.1 Tested on: 0.1 CVE: Code:...

Blax Blog 0.1 SQL Injection

Blax Blog = 0.1 Auth Bypass SQL Injection Vulnerability By cr4wl3r Download: http://www.proje3x.com/indir/blax.rar PoC: path/admin/girisyap.php Username: ' or '1=1 password: ' or '1=1...

Open Educational System 0.1 Beta - 'CONF_INCLUDE_PATH' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/38449/info Open Educational System is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...

Kandalf Upper 0.1 Shell Upload

======================================================================================== | Title : kandalf upper 0.1 Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

CVE-2009-4451

Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in fileup/...

kandalf upper 0.1 - Arbitrary File Upload

kandalf upper 0.1 - Arbitrary File Upload ======================================================================================== | Title : kandalf upper 0.1 Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi -...

kandalf upper 0.1 - Arbitrary File Upload

======================================================================================== | Title : kandalf upper 0.1 Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

CVE-2009-3750

SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter...

CVE-2009-3750

CVE-2009-3750 is a confirmed SQL injection vulnerability in ToyLog 0.1, exploitable via read.php through the idm parameter. The NVD entry describes remote arbitrary SQL execution with a CVSS v2 base score of 7.5 (HIGH), indicating partial confidentiality, integrity, and availability impact. Conne...

CVE-2009-3597

Digitaldesign CMS 0.1 is affected. The vulnerability arises from storing sensitive data under the web root with insufficient access control, allowing remote attackers to download the database file (autoconfig.dd) via a direct request. Impact is confined to partial confidentiality as described in ...

PT-2009-5879 · Digitaldesign · Digitaldesign Cms

Name of the Vulnerable Software and Affected Versions: Digitaldesign CMS version 0.1 Description: The issue allows remote attackers to download the database file via a direct request for autoconfig.dd due to insufficient access control. This is because sensitive information is stored under the we...

CVE-2009-3542

Directory traversal vulnerability in ls.php in LittleSite aka LS or LittleSite.php 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php. NOTE: in some environments, this can be leveraged for remote file inclusion by using a U...

Tor 'relay.c' DNS Spoofing Vulnerability - July09 (Linux)

This host is installed with Tor and is prone to DNS Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbtordnsspoofingvulnjul09lin.nasl 4892 2016-12-30 15:39:07Z teissa $ Tor 'relay.c' DNS Spoofing Vulnerability - July09 Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbone Network...

Command injection

The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...