Netious CMS 0.4 (index.php pageid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Netious CMS 0.4 index.php pageid SQL Injection Vulnerability ============================================================== || || | || o,7 || . o7 || 4||| ow, : / /...

Netious CMS 0.4 - 'pageid' SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . ================================ ========================== ==================== |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings...

AN Guestbook 0.4 - send_email.php Cross-Site Scripting

AN Guestbook 0.4 - sendemail.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29254/info AN Guestbook ANG is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

AN Guestbook 0.4 - 'send_email.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29254/info AN Guestbook ANG is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Fedora 8 : speex-1.2-0.4.beta2 (2008-3103)

Security update: Add mode checks to speexpackettoheader to protect applications using speex library and not having proper checks CVE-2008-1686, 441239, https://trac.xiph.org/changeset/14701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in busca.php in eForum 0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 busca and 2 link parameters...

CVE-2008-1477

Multiple cross-site scripting XSS vulnerabilities in busca.php in eForum 0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 busca and 2 link parameters...

eForum 0.4 - busca.php Multiple Cross-Site Scripting Vulnerabilities

eForum 0.4 - busca.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28293/info eForum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities m...

Simple PHP Scripts Gallery 0.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28056/info Simple PHP Scripts 'gallery' is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Sql injection

Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlanid parameter to 1 vlanview.php, 2 vlanedit.php, and 3 vlandel.php; the 4 assetclassgroupid parameter to assetclassgroupview.php; the 5 subnetid parameter to nodelist.php; and...

CVE-2007-6579

Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlanid parameter to 1 vlanview.php, 2 vlanedit.php, and 3 vlandel.php; the 4 assetclassgroupid parameter to assetclassgroupview.php; the 5 subnetid parameter to nodelist.php; and...

Apache::AuthCAS Cookie SQL注入漏洞

Apache::AuthCAS验证模块可使用户保护Apache服务器上的内容。 Apache::AuthCAS不正确过滤用户提交的COOKIE内容，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题存在于CPAN版本516行中： http://search.cpan.org/dcastro/Apache-AuthCAS-0.4/lib/Apache/AuthCAS.p m, 会话ID从COOKIE中展开 $cookie = /.$SESSIONCOOKIENAME=^;+\s;.|\s$/; $sid = $1 || "";...

CVE-2007-6001

Multiple cross-site scripting XSS vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 func or 2 date parameter, or the jid parameter in a 3 log or 4 user action, a different vulnerability than CVE-2007-3910...

CVE-2007-5975

CVE-2007-5975 affects TBSource’s index.php as used in TBDev and TorrentStrike 0.4. The vulnerability is a SQL injection in the choice parameter, exploitable by remote authenticated users to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 6.5 (Medium) with network acces...

CVE-2007-5942

Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with 1 a certain func parameter value; or 2 certain func, jid, page, and limit parameter values; which reveals the path in various error messages...

CVE-2007-5942

Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with 1 a certain func parameter value; or 2 certain func, jid, page, and limit parameter values; which reveals the path in various error messages...

CVE-2007-5942

Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with 1 a certain func parameter value; or 2 certain func, jid, page, and limit parameter values; which reveals the path in various error messages...

CVE-2007-5942

CVE-2007-5942 affects Bandersnatch 0.4. A malformed request to index.php with specific func parameter values (or with a combination of func, jid, page, and limit) can cause error messages to disclose the application path, enabling information disclosure. The NVD entry attributes a CVSS v2 base sc...

quickdirty-lfi.txt

Quick and Dirty Blog 0.4 categories.php Local File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/qdblog/qdblog-0.4.tar.bz2 POC: /categories.php?theme=../../../../../../../../../etc/passwd%00...

Quick and Dirty Blog (qdblog) 0.4 - categories.php Local File Inclusion

Quick and Dirty Blog qdblog 0.4 - categories.php Local File Inclusion Quick and Dirty Blog 0.4 categories.php Local File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/qdblog/qdblog-0.4.tar.bz2 POC: /categories.php?theme=../../../../../../../../../etc/passwd%00 milw0rm.com...