SamTodo 1.1 - 'completed' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29569/info SamTodo is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

SamTodo 1.1 - 'tid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29568/info SamTodo is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Sql injection

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a admin/duzenle.asp and b adminoku.asp; the 2 kid parameter to c kategori.asp and d adminkategori.asp; and unspecified parameters to e uye.asp and f oku.asp...

CVE-2008-2448

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a admin/duzenle.asp and b adminoku.asp; the 2 kid parameter to c kategori.asp and d adminkategori.asp; and unspecified parameters to e uye.asp and f oku.asp...

CVE-2008-2448

CVE-2008-2448 relates to multiple SQL injection vulnerabilities in Meto Forum 1.1 . The flaws allow remote attackers to execute arbitrary SQL commands via specific parameters: (1) id to (a) admin/duzenle.asp and (b) admin_oku.asp; (2) kid to (c) kategori.asp and (d) admin_kategori.asp; and unspec...

Microsoft .NET JIT Compiler Code Execution Vulnerability (ms07-040)

Microsoft .NET JIT Compiler is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2204

Multiple cross-site scripting XSS vulnerabilities in admin/inc/header.php in Maian Search 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 header, 2 header2, 3 header3, 4 header4, 5 header5, 6 header6, 7 header7, 8 header8, and 9 header9 parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/inc/header.php in Maian Search 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 header, 2 header2, 3 header3, 4 header4, 5 header5, 6 header6, 7 header7, 8 header8, and 9 header9 parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 msgadminheader, 2 msgadminheader2, 3 msgadminheader3, 4 msgadminheader4, and unspecified other parameters to admin/inc/header.php; the 5 msgscript3 and...

CVE-2008-2204

Maian Search 1.1 has multiple XSS vulnerabilities in admin/inc/header.php, exploitable via the nine parameters (header, header2, ..., header9). Remote attackers can inject arbitrary script/HTML, as described in CVE-2008-2204. The connected documents do not provide remediation details or patch inf...

CVE-2008-2206

CVE-2008-2206 affects Maian Music 1.1 and describes multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script or HTML via two vectors: (1) the keywords parameter in a search action to index.php, and (2) the msg_script parameter to admin/...

CVE-2008-2203

CVE-2008-2203 affects Maian Search 1.1 and is a SQL injection in search.php via the keywords parameter in a search action. Remote attackers could potentially execute arbitrary SQL commands. The provided sources confirm the vulnerability description but do not include exploitation status or concre...

CVE-2008-2212

CVE-2008-2212 affects Maian Cart 1.1 with multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary script/HTML via: (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminheader4 in admin/inc/header.php; (5) msg_script3 and o...

Sql injection

SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2175

SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2175

SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

沸腾展望新闻系统任意文件下载漏洞

漏洞文件: down.asp Const adTypeBinary = 1 FileName = Request.QueryString"FileName" if FileName = "" Then Response.Write "无效文件名！" Response.End End if FileExt = MidFileName, InStrRevFileName, "." + 1 Select Case UCaseFileExt Case "ASP", "ASA", "ASPX", "ASAX", "MDB" Response.Write "非法操作！" Response.End E...

CVE-2008-2131

Cross-site scripting XSS vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."...

Pre Shopping Mall 1.1 (search.php search) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Pre Shopping Mall 1.1 search.php search SQL Injection Vulnerability =====================================================================...

phpDirectorySource 1.1 - Multiple SQL Injections

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: SQL Injection...