pPIM 1.01 (notes.php id) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ========================================================= pPIM 1.01 notes.php id Remote Command Execution Exploit ========================================================= !/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution...

WEBBDOMAIN Polls 1.01 - Authentication Bypass

WEBBDOMAIN Polls 1.01 - Authentication Bypass / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // EgY Coders Vulnerability Research TM Discovered by : Hakxer Type Gap : WEBBDOMAIN Poll...

CVE-2008-4784

aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflogautha cookie to "A" or "O" in 1 editdelete.php, 2 editcat.php, 3 editlock.php, and 4 editform.php...

aflog-insecure.txt

aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies url: http://www.aflog.org/download.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not...

aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies

Exploit for unknown platform in category web applications ========================================================== aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies ========================================================== aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies url...

aflog 1.01 - Multiple Insecure Cookie Handling Vulnerabilities

aflog 1.01 - Multiple Insecure Cookie Handling Vulnerabilities aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies url: http://www.aflog.org/download.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for...

CVE-2008-4674

The vulnerability CVE-2008-4674 affects Conkurent Real Estate Manager 1.01, with a SQL injection in the realestate-index.php file that accepts the cat_id parameter in browse mode. This allows remote attackers to execute arbitrary SQL commands. The connected documents confirm the issue and base im...

CVE-2008-4528

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager pPIM 1.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter in an edit action...

Joomla! Component Joomtracker 1.01 - SQL Injection

Joomla! Component Joomtracker 1.01 - SQL Injection . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - C1c4Tr1Z - beenu - P47tr1ck and all darkc0de members...

ppim-lfi.txt

pPIM 1.01 notes.php id Local File Inclusion Vulnerability url: http://www.phlatline.org/docs/files/ppim.zip Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author wil...

pPIM 1.01 - notes.php Local File Inclusion

pPIM 1.01 - notes.php Local File Inclusion pPIM 1.01 notes.php id Local File Inclusion Vulnerability url: http://www.phlatline.org/docs/files/ppim.zip Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...

pPIM 1.01 (notes.php id) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =========================================================== pPIM 1.01 notes.php id Local File Inclusion Vulnerability =========================================================== pPIM 1.01 notes.php id Local File Inclusion Vulnerability url...

pPIM 1.01 - 'notes.php' Local File Inclusion

pPIM 1.01 notes.php id Local File Inclusion Vulnerability url: http://www.phlatline.org/docs/files/ppim.zip Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author wil...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web script or HTML via the catid parameter in a 1 useradd, 2 recip, 3 tellafriend, or 4 contact action, or 5 in a request without an action; or 6 the id...

CVE-2008-1892

Blogator-script 0.95 and 1.01 are affected by a Cross-Site Scripting (XSS) vulnerability in bs_auth.php where the msg parameter is not properly sanitized. This allows remote attackers to inject arbitrary web script or HTML, potentially compromising users’ browsers (e.g., stealing cookies) when in...

Sql injection

Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to comments.php and 2 an unspecified parameter to view.php...

CVE-2008-0398

Cross-site scripting XSS vulnerability in aflog 1.01, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment form...

Cross site scripting

Cross-site scripting XSS vulnerability in aflog 1.01, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment form...

CVE-2008-0398

The CVE-2008-0398 entry describes a Cross-site scripting (XSS) vulnerability in aflog 1.01 and possibly earlier versions. The issue allows remote attackers to inject arbitrary web script or HTML via the comment form . According to the NVD entry, the CVSSv2 base score is 4.3 (Medium) with vector A...

aflog 1.01 comments.php XSS / SQL Injection Vulnerability

No description provided by source. Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/ Vulnerability type: SQL Injection comments.php and XSS Author: shinmai, 2008-01-22 Description: SQL INJECTION: SQL injection is possible in comments.php for the GET variable 'id', like this:...