CVE-2017-7911

A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. An insufficient-encapsulation vulnerability has been identified, which may allow remote code execution...

StatusNetLaconica 0.7.40.8.20.9.0beta3 - Arbitrary File Reading

StatusNetLaconica 0.7.40.8.20.9.0beta3 - Arbitrary File Reading +-------------------------------------------------------------------------------+ + StatusNet/Laconica title = $this-trimmed'title'; $this-filename = INSTALLDIR.'/doc-src/'.$this-title; //1 if !fileexists$this-filename...

StatusNet/Laconica 0.7.4/0.8.2/0.9.0beta3 - Arbitrary File Reading

+-------------------------------------------------------------------------------+ + StatusNet/Laconica title = $this-trimmed'title'; $this-filename = INSTALLDIR.'/doc-src/'.$this-title; //1 if !fileexists$this-filename $this-clientError'No such document.'; return; $this-showPage;...

SIP Witch 0.7.4 w/libosip2-4.0.0 DoS via NULL pointer derefence in libosip2

SIP Witch 0.7.4 w/libosip2-4.0.0 Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 DoS by the NULL pointer derefence in libosip2. True, found in the ancient version of sipwitch default in BT5 but the problem lies in the library used by it and may...

SIP Witch 0.7.4 Denial Of Service

SIP Witch 0.7.4 w/libosip2-4.0.0 Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 DoS by the NULL pointer derefence in libosip2. True, found in the ancient version of sipwitch default in BT5 but the problem lies in the library used by it and may...

SQLAlchemy: SQL injection

Background SQLAlchemy is a Python SQL toolkit and Object Relational Mapper. Description SQLAlchemy does not properly sanitize input passed from the “limit” and “offset” keywords to the select function before using it in an SQL query. Impact A remote attacker could exploit this vulnerability to...

CVE-2012-3881

Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 95.php, 2 view.php, or 3 rtg.php...

Sql injection

SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

CVE-2010-1343

SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

CVE-2010-1343

SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

CVE-2010-1343

CVE-2010-1343 concerns a SQL injection in SiteX 0.7.4 beta, affecting the photo.php script via the albumid parameter. The underlying issue is unsanitized input incorporated into a database query, enabling remote attackers to manipulate queries and potentially access sensitive data. Public sources...

CVE-2009-1846

Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the THEMEFOLDER parameter to 1 Corporate/homepage.php, 2 Fusion/homepage.php, 3 Joombo/homepage.php, 4 Streamline/homepage.php,...

Directory traversal

Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the THEMEFOLDER parameter to 1 Corporate/homepage.php, 2 Fusion/homepage.php, 3 Joombo/homepage.php, 4 Streamline/homepage.php,...

WebPortal CMS 0.7.4 - 'code' Remote Code Execution

WebPortal POC : /index.php?m=admin&f=console&action=execute&code=id; passthruid; milw0rm.com 2008-09-23...

WebPortal CMS <= 0.7.4 (fckeditor) Arbitrary File Upload Vulnerability

No description provided by source. S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site: wWw.SvvaT.IR - Exploit:...

webportalcms074-sql.txt

!/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==-- Discovered By: StAkeR [email protected] +...

CVE-2008-3720

CVE-2008-3720 describes a SQL injection vulnerability in DeeEmm CMS (DMCMS) 0.7.4, where remote attackers can execute arbitrary SQL commands through the page parameter of index.php. The vulnerability is noted as overlapping with CVE-2007-5679 (id parameter in media page), indicating a reused vuln...

DeeEmm CMS (DMCMS) 0.7.4 Multiple Remote Vulnerabilities

No description provided by source. DeeEmm CMS Sql Injection/Rfi AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download :...

deeemm CMS (dmcms) 0.7.4 - Multiple Vulnerabilities

deeemm CMS dmcms 0.7.4 - Multiple Vulnerabilities DeeEmm CMS Sql Injection/Rfi AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download :...

deeemm CMS (dmcms) 0.7.4 - Multiple Vulnerabilities

DeeEmm CMS Sql Injection/Rfi AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download : http://surfnet.dl.sourceforge.net/sourceforge/dmcms/dmcms074.tar.gz Ho...