CVE-2008-3406

The CVE-2008-3406 entry describes a SQL injection vulnerability in showcat.php of phpLinkat 0.1, where the catid parameter can be exploited to execute arbitrary SQL commands remotely. The connected documents corroborate the vulnerability class (SQL injection) and the affected component (phpLinkat...

Exploits communitycms-0.1 Remote File Inclusion

No description provided by source. ?php / + IN THE NAME OF GOD + + + Persian Boys Hacking Team -:- 2008 -:- IRAN + - + - discovered by N3TR00T3R at Y! dot com + - communitycms-0.1 Remote File Includion + - download :http://sourceforge.net/project/showf...roupid=223968 + - sp tnx :...

Cross site scripting

Cross-site scripting XSS vulnerability in mensaje.php in C. Desseno YouTube Blog ytb 0.1 allows remote attackers to inject arbitrary web script or HTML via the m parameter...

CVE-2008-3306

CVE-2008-3306 targets C. Desseno YouTube Blog (ytb) 0.1. The vulnerability is a SQL injection in info.php that allows remote attackers to execute arbitrary SQL commands via the id parameter (a vector distinct from CVE-2008-3307). Associated records indicate a second, related entry (CVE-2008-3307)...

CVE-2008-3305

The CVE-2008-3305 entry describes a Cross-site Scripting (XSS) vulnerability in the C. Desseno YouTube Blog (ytb) 0.1 platform, specifically in the file mensaje.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the m parameter. Concrete details across conne...

CVE-2008-3308

CVE-2008-3308 : PHP remote file inclusion in cuenta/cuerpo.php of C. Desseno YouTube Blog (ytb) 0.1. When register_globals is enabled, an attacker can provide a URL in the base_archivo parameter to execute arbitrary PHP code on the server. Affected scenario: vulnerable 0.1 with register_globals. ...

Community CMS 0.1 - include.php Remote File Inclusion

Community CMS 0.1 - include.php Remote File Inclusion source: https://www.securityfocus.com/bid/30275/info Community CMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute malicious PHP code i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admineditsubmenu.php, 2 adminnewsubmenu.php, and 3 adminedittopmenu.php in admin/...

CVE-2008-2987

CVE-2008-2987 describes multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1. The issue is triggered by PATH_INFO input to the admin subsystem, specifically the files admin_edit_submenu.php, admin_new_submenu.php, and admin_edit_topmenu.php, allowing remote attackers to inject arb...

Authentication flaw

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu...

CVE-2008-2879

Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu...

ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

CVE-2008-2839

CVE-2008-2839 is a reported cross-site scripting (XSS) vulnerability in the Traindepot 0.1 search module. The issue arises when an attacker can inject arbitrary script or HTML through the query parameter to index.php, potentially affecting users who load the affected page. The provided data ident...

CVE-2008-2839

Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...

CVE-2008-2838

Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the module parameter...

sharecms-sql.txt

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

HoMaP-CMS 0.1 (index.php go) Remote SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------------------------------------------------------------------------------- // HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability // Author: SxCx // Download: SourceForge.net // Version affected: 0.1 //...

HoMaP-CMS 0.1 - 'go' SQL Injection

-------------------------------------------------------------------------------------------------------------------------------- // HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability // Author: SxCx // Download: SourceForge.net // Version affected: 0.1 // Exploit:...

Benja CMS 0.1 - '/admin/admin_edit_topmenu.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29884/info The 'benja CMS' program is prone to multiple vulnerabilities because it fails to adequately validate input and restrict access. These issues include three cross-site scripting issues, an arbitrary-file-upload issue, and a vulnerability that...

homap-sql.txt

-------------------------------------------------------------------------------------------------------------------------------- // HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability // Author: SxCx // Download: SourceForge.net // Version affected: 0.1 // Exploit:...