Discuz!NT 2.5 showuser.aspx注入漏洞

No description provided by source...

CVE-2008-3715

CVE-2008-3715 concerns an XSS vulnerability in inc-core-admin-editor-previouscolorsjs.php affecting FlexCMS 2.5 and earlier. When register_globals is enabled, the PreviousColorsString parameter can be used by remote attackers to inject arbitrary web script or HTML. The vulnerability is triggered ...

FlexCMS 2.5 - inc-core-admin-editor-previouscolorsjs.php Cross-Site Scripting

FlexCMS 2.5 - inc-core-admin-editor-previouscolorsjs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30709/info FlexCMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue t...

VMWare VirtualCenter用户帐户信息泄露漏洞

BUGTRAQ ID: 30664 CVE ID：CVE-2008-3514 CNCVE ID：CNCVE-20083514 VMWare VirtualCenter是一款企业级的虚拟机构架管理软件，用于对分散的计算机环境中的虚拟机的管理和控制。 VMWare VirtualCenter存在信息泄漏问题，远程攻击者可以利用漏洞获得系统帐户的用户名。 目前没有详细漏洞细节提供。 VMWare VirtualCenter 2.0.2 VMWare VirtualCenter 2.5 Update 1 VMWare VirtualCenter 2.5 VMWare VirtualCenter...

Python: Multiple vulnerabilities

Background Python is an interpreted, interactive, object-oriented programming language. Description Multiple vulnerabilities were discovered in Python: David Remahl of Apple Product Security reported several integer overflows in core modules such as stringobject, unicodeobject, bufferobject,...

CVE-2008-3163

Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dodosmailheaderfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-3163

CVE-2008-3163 concerns a directory traversal vulnerability in DodosMail 2.5. The flaw occurs in the dodosmail_header_file parameter, allowing remote attackers to include and execute arbitrary local files by supplying a .. path traversal sequence. Affected component: dodosmail_header_file handling...

CVE-2008-2774

SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter, a different vector than CVE-2007-4736...

Directory traversal

Directory traversal vulnerability in installmod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter in a go action...

CVE-2008-2482

Directory traversal vulnerability in installmod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter in a go action...

CVE-2008-2456

CVE-2008-2456 affects ComicShout 2.5 and earlier. The vulnerability is an SQL injection in index.php via the comic_id parameter, enabling remote execution of arbitrary SQL commands. No remediation details are provided in the supplied documents; exploitation information is referenced (Exploit-DB l...

CKGold Shopping Cart 2.5 - 'category_id' SQL Injection

Cr@zyKing / [email protected] CKGold Shopping Cart 2.5 categoryid SQL Injection Vulnerability Script page : http://cartkeeper.com Demo Page : http://ckgold.cartkeeper.com Commercial License Price: $99.00 Commercial License Price: $79.95 :| http://localhost/item.php?itemid=-1&categoryid=Sql...

DSECRG-08-025.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-025 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date of Public Advisory: 23.05.2008 Author: Digital...

ComicShout 2.5 (index.php comic_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== ComicShout 2.5 index.php comicid Remote SQL Injection Vulnerability ====================================================================== Exploit:...

comicshout-sql.txt

ComicShout Remote 2.5 SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x-info niiubatbl4ck-b0x.info Exploit: /index.php?comicid=-1+UNION+SELECT+1,2,3,concatsiteadmin,char58,sitepass,5,6+FROM+setup/ Admin PA: admin.php Greetz: dun - sidpsycho - Kacper...

ComicShout 2.5 - 'comic_id' SQL Injection

ComicShout Remote 2.5 SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x-info niiubatbl4ck-b0x.info Exploit: /index.php?comicid=-1+UNION+SELECT+1,2,3,concatsiteadmin,char58,sitepass,5,6+FROM+setup/ Admin PA: admin.php Greetz: dun - sidpsycho - Kacper milw0rm.com 2008-05-20...

CVE-2008-2337

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 kategoria parameter to a galeria.php and the 2 idphot parameter to b popup/koment.php and c popup/opis.php in, different vectors than...

Sql injection

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 kategoria parameter to a galeria.php and the 2 idphot parameter to b popup/koment.php and c popup/opis.php in, different vectors than...

CVE-2008-2337

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 kategoria parameter to a galeria.php and the 2 idphot parameter to b popup/koment.php and c popup/opis.php in, different vectors than...

CVE-2008-2337

CVE-2008-2337 affects IMGallery 2.5, with multiple SQL injection vulnerabilities when magic_quotes_gpc is disabled. Exploitable via the (1) kategoria parameter to galeria.php and (2) id_phot parameter to popup/koment.php and popup/opis.php, per primary description. Connected records also link to ...