cmsWorks 2.2 RC4 - 'FCKeditor' Arbitrary File Upload

array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to upload arbitrary files containing malicious PHP code due to multiple file extensions isn't properly checked / errorreporting0...

cmsWorks 2.2 RC4 - 'mod_root' Remote File Inclusion

??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable crack.... ?????...

shibby shop 2.2 - Multiple Vulnerabilities

Title: sHibby sHop v2.2 = Remote SQL/Update Multiple Vulnerability ================================================================ + Author : KnocKout + Special Thankz : Dr.Kacak + System 0VerfL0verZ ================================================================= Script : sHibby sHop Verz: 2.2...

CVE-2008-2782

Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 libraryrss.php and 2 rss.php...

CVE-2008-2782

Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 libraryrss.php and 2 rss.php...

CVE-2008-2782

CVE-2008-2782 affects OtomiGenX 2.2. The vulnerability is a directory-traversal flaw in the PHP components library_rss.php and rss.php that allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the lang parameter. This aligns with the NVD entry (CVSSv...

Sql injection

SQL injection vulnerability in login.php in OtomiGenX 2.2 allows remote attackers to execute arbitrary SQL commands via the userAccount parameter aka the User Name field to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-2642

SQL injection vulnerability in login.php in OtomiGenX 2.2 allows remote attackers to execute arbitrary SQL commands via the userAccount parameter aka the User Name field to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-2642

SQL injection vulnerability in login.php in OtomiGenX 2.2 allows remote attackers to execute arbitrary SQL commands via the userAccount parameter aka the User Name field to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-2642

CVE-2008-2642 details an SQL injection vulnerability in OtomiGenX 2.2. The flaw occurs in login.php via the userAccount parameter (User Name) passed to index.php, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a NETWORK attack vector, LOW complexity, no authentic...

Todd Woolums ASP News Management 2.2 - SQL Injection

Todd Woolums ASP News Management 2.2 - SQL Injection |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

OtomiGenX 2.2 - userAccount SQL Injection

OtomiGenX 2.2 - userAccount SQL Injection source: https://www.securityfocus.com/bid/29470/info OtomiGenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

e107 Plugin BLOG Engine 2.2 (uid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== e107 Plugin BLOG Engine 2.2 uid Blind SQL Injection Vulnerability =================================================================== ::e107 Plugin BLOG Engine v2.2...

e107 Plugin BLOG Engine 2.2 - 'uid' Blind SQL Injection

::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend...

e107 Plugin BLOG Engine 2.2 (rid) Blind SQL Injection Vulnerability

No description provided by source. + Author: Saime + Script: e107 Plugin BLOG Engine v2.2 rid Blind SQL Injection + URL: http://e107coders.org/download.php?view.1843 + Date: 13/05/2008 + Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, a...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2127

Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2127

The CVE-2008-2127 entry describes an XSS vulnerability in the CMS Faethon 2.2 Ultimate, exploitable via the what parameter in search.php. The issue allows remote attackers to inject arbitrary script/HTML, with impact limited to partial integrity and no confidentiality/availability loss per the ci...

CVE-2008-2128

CVE-2008-2128 describes a PHP remote file inclusion in CMS Faethon 2.2 Ultimate (templates/header.php) that allows an attacker to execute arbitrary PHP code via the mainpath parameter. This aligns with related Faethon RFI issues documented for earlier versions (e.g., 2.0/1.3.2) and is supported b...

CMS Faethon 2.2 Ultimate (RFI/XSS) Multiple Remote Vulnerabilies

Exploit for unknown platform in category web applications ================================================================ CMS Faethon 2.2 Ultimate RFI/XSS Multiple Remote Vulnerabilies ================================================================ -========================================== Vi...