41 matches found
Sql injection
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676...
CVE-2011-4274
Cross-site scripting XSS vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676...
CVE-2011-4274
CVE-2011-4274 is a Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile plug-ins for Movable Type, affecting versions before 3.1. The root cause is not fully specified in the provided description, but the issue is located in Movable Type’s A-Form plug-ins and enables remote scr...
CVE-2011-2676
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors...
CVE-2011-2676
The CVE-2011-2676 issue concerns the A-Form family of Movable Type plug-ins (A-Form bamboo <1.3.6 and 2.x <2.0.3; A-Form PC/PC-Mobile
CVE-2011-2676: Improper Authentication
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors...
CVE-2011-4274: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676...
A-Form vulnerable in restricting access
Overview A-Form contains a vulnerability in restricting access permissions. A-Form is a plug-in for Movable Type that adds mail forms and survey forms. A-Form contains a vulnerability in restricting access permissions. Impact Information managed by A-Form may be altered by a user who does not hav...
JVN#34980730: A-Form vulnerable in restricting access
A-Form is a plug-in for Movable Type that adds mail forms and survey forms. A-Form contains a vulnerability in restricting access permissions. Impact Information managed by A-Form may be altered by a user who does not have administrative privileges. Solution Update the Software Update to the late...
Joomla Component Phil-a-Form SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================================== Joomla Component Phil-a-Form SQL Injection Vulnerability ======================================================== + Vulnerable File :...
Sql injection
SQL injection vulnerability in index.php in the Phil-a-Form comphilaform 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the formid parameter...
CVE-2007-2933
SQL injection vulnerability in index.php in the Phil-a-Form comphilaform 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the formid parameter...
CVE-2007-2933
The CVE-2007-2933 entry describes an SQL injection in the Phil-a-Form (com_philaform) Joomla! component. Affected version: 1.2.0.0 and earlier. Vulnerable component is index.php where attacker-supplied form_id can be used to inject and execute arbitrary SQL commands remotely. Impact as stated: pa...
CVE-2007-2933
SQL injection vulnerability in index.php in the Phil-a-Form comphilaform 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the formid parameter...
CVE-2007-2933: Undefined Security Weakness
SQL injection vulnerability in index.php in the Phil-a-Form comphilaform 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the formid parameter...
jcpf-sql.txt
!/bin/sh Joomla Component Phil-a-Form = 1.2.0.0 SQL Injection Exploit Discovered by: Cody "CypherXero" Rester Payload: Admin Username and MD5 Hash Retrieval Website: http://www.cypherxero.net Shoutouts to the milw0rm community, the PIMP forums and my blog, of course echo...
Joomla Component Phil-a-Form <= 1.2.0.0 SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Joomla Component Phil-a-Form = 1.2.0.0 SQL Injection Exploit ============================================================= !/bin/sh Joomla Component Phil-a-Form = 1.2.0.0 SQL...
Joomla! Component Phil-a-Form 1.2.0.0 - SQL Injection
Joomla! Component Phil-a-Form 1.2.0.0 - SQL Injection !/bin/sh Joomla Component Phil-a-Form = 1.2.0.0 SQL Injection Exploit Discovered by: Cody "CypherXero" Rester Payload: Admin Username and MD5 Hash Retrieval Website: http://www.cypherxero.net Shoutouts to the milw0rm community, the PIMP forums...
Joomla Component Phil-a-Form <= 1.2.0.0 SQL Injection Exploit
No description provided by source. !/bin/sh Joomla Component Phil-a-Form = 1.2.0.0 SQL Injection Exploit Discovered by: Cody "CypherXero" Rester Payload: Admin Username and MD5 Hash Retrieval Website: http://www.cypherxero.net Shoutouts to the milw0rm community, the PIMP forums and my blog, of...