Lucene search
+L

357 matches found

NVD
NVD
added 2009/09/16 7:30 p.m.19 views

CVE-2009-3217

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the memberid parameter in an edituser action to index.php...

7.5CVSS8.3AI score0.00947EPSS
Exploits0References1
Prion
Prion
added 2009/09/16 7:30 p.m.13 views

Directory traversal

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magicquotesgpc is disabled, allow remote attackers to read arbitrary files via a .. dot dot in 1 the show parameter to the admin module, reachable through index.php; or 2 the module parameter to index.php...

4.3CVSS7.4AI score0.02289EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2009/09/16 7:0 p.m.38 views

CVE-2009-3216

CVE-2009-3216 describes multiple directory traversal vulnerabilities in iWiccle 1.01 . When magic_quotes_gpc is disabled, remote attackers can read arbitrary files by supplying a .. sequence in either the show parameter of the admin module (accessed via index.php) or the module parameter of index...

4.3CVSS6.9AI score0.02289EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2009/09/16 7:0 p.m.23 views

CVE-2009-3216

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magicquotesgpc is disabled, allow remote attackers to read arbitrary files via a .. dot dot in 1 the show parameter to the admin module, reachable through index.php; or 2 the module parameter to index.php...

6.9AI score0.02289EPSS
Exploits0References2
Cvelist
Cvelist
added 2009/09/16 7:0 p.m.23 views

CVE-2009-3217

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the memberid parameter in an edituser action to index.php...

8.3AI score0.00947EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2009/07/28 12:0 a.m.27 views

Limmy 1.01 SQL Injection

Limny 1.01 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Script Homepage : http://www.limny-project.com/ + SQL Injection Vulnerability - Notes : magicquotesgpc = off - Vulnerable code in includes/functions.php...

0.5AI score
Exploits0
Packet Storm
Packet Storm
added 2009/07/28 12:0 a.m.29 views

iWiccle 1.01 Local File Inclusion / SQL Injection

iWiccle 1.01 LFI/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://www.wiccle.com/index.php?module=wiccle&show=download + Local File Inclusion - PoC's...

0.2AI score
Exploits0
0day.today
0day.today
added 2009/07/27 12:0 a.m.15 views

Limny 1.01 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== Limny 1.01 Auth Bypass SQL Injection Vulnerability ==================================================== + Limny 1.01 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + Scri...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2009/07/27 12:0 a.m.14 views

Limny 1.01 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Limny 1.01 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Script Homepage : http://www.limny-project.com/ + SQL Injection Vulnerability - Notes : magicquotesgpc = off - Vulnerable code in...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2009/07/27 12:0 a.m.9 views

iwiccle 1.01 - Local File Inclusion SQL Injection

iwiccle 1.01 - Local File Inclusion SQL Injection + iWiccle 1.01 LFI/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://www.wiccle.com/index.php?module=wiccle&show=download + Local File Inclusion - PoC's...

0.2AI score
Exploits0
seebug.org
seebug.org
added 2009/07/27 12:0 a.m.14 views

iWiccle 1.01 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. + iWiccle 1.01 LFI/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://www.wiccle.com/index.php?module=wiccle&show=download + Local File Inclusion - PoC's...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2009/07/27 12:0 a.m.9 views

Limny 1.01 - Authentication Bypass

Limny 1.01 - Authentication Bypass + Limny 1.01 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Script Homepage : http://www.limny-project.com/ + SQL Injection Vulnerability - Notes : magicquotesgpc = off - Vulnerable code in...

1AI score
Exploits0
0day.today
0day.today
added 2009/07/27 12:0 a.m.16 views

iWiccle 1.01 (LFI/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== iWiccle 1.01 LFI/SQL Multiple Remote Vulnerabilities ====================================================== + iWiccle 1.01 LFI/SQL Multiple Remote Vulnerabilities + Discovered By SirGo...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2009/07/27 12:0 a.m.39 views

iwiccle 1.01 - Local File Inclusion / SQL Injection

iWiccle 1.01 LFI/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://www.wiccle.com/index.php?module=wiccle&show=download + Local File Inclusion - PoC's...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2009/07/27 12:0 a.m.31 views

Limny 1.01 - Authentication Bypass

Limny 1.01 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Script Homepage : http://www.limny-project.com/ + SQL Injection Vulnerability - Notes : magicquotesgpc = off - Vulnerable code in includes/functions.php...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2009/06/14 12:0 a.m.30 views

eliteCMS Multiple Vulnerabilities

eliteCMS is prone to a vulnerability that lets attackers upload and execute arbitrary PHP code. The application is also prone to a cross-site scripting issue and to a SQL Injection Vulnerability. These issues occur because the application fails to sufficiently sanitize user-supplied input...

7.5CVSS6.7AI score0.00973EPSS
Exploits1References3
Packet Storm
Packet Storm
added 2009/06/03 12:0 a.m.18 views

eliteCMS 1.01 XSS / SQL Injection

eliteCMS 1.01 SQL/XSS Multiple Remote Vulns by xenohive greets to daganarus, dearest of all my friends. SQL injection requires magicquotes = off -/includes/functions.php --------------------------------- 89. function getpagesettings ... 92. $query = "SELECT FROM pages WHERE id = '$GET'page''"; 93...

0.4AI score
Exploits0
0day.today
0day.today
added 2009/06/01 12:0 a.m.15 views

eliteCMS 1.01 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= eliteCMS 1.01 SQL/XSS Multiple Remote Vulnerabilities ======================================================= eliteCMS 1.01 SQL/XSS Multiple Remote Vulns by xenohive greets to...

7.1AI score
Exploits0
CVE
CVE
added 2009/04/06 9:0 p.m.43 views

CVE-2008-6625

The CVE describes an SQL injection vulnerability in getin.php of WEBBDOMAIN Polls (Poll) 1.0 and 1.01, exploitable via the username parameter. The underlying issue is unsanitized user input allowing arbitrary SQL commands to be executed by remote attackers. Affected software is WEBBDOMAIN Polls, ...

7.5CVSS8.7AI score0.01003EPSS
Exploits1References5Affected Software1
Packet Storm
Packet Storm
added 2009/02/23 12:0 a.m.35 views

pPIM 1.01 Command Execution Exploit

!/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution Exploit url: http://www.phlatline.org/docs/files/ppim.zip Author: Jose Luis Gongora Fernandez a.k.a JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT thanks for the base code: CWH...

7.4AI score
Exploits0
Rows per page
Query Builder