498 matches found
crazygoomba-sql.txt
CANAKKALE GECiLMEZ Crazy Goomba 1.2.1 SQL inj dork: : sory author: ZoRLu home: http://www.z0rlu.ownspace.org yildirimordulari.org r00tsecurity.org securityfocus.com contact: [email protected] & [email protected] baska msn yok taklitlerden kacInIn Not: msn i ekleyipte densiz densiz konusanIn sulalesin...
Sql injection
SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...
WordPress DMSGuestbook Plugin <= 1.7.0 - SQL Injection
Because of this vulnerability in the administration panel, the authenticated administrators can execute arbitrary SQL commands via unspecified vectors. Solution Update the plugin...
CVE-2004-2690
CVE-2004-2690 concerns an unrestricted file upload vulnerability in the NewsPHP Administration Panel. The issue permits remote authenticated administrators to upload and execute arbitrary code instead of video files, indicating a flaw in how uploaded content is validated and handled by the panel....
CVE-2004-2690
Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files...
CVE-2007-0056
Multiple cross-site scripting XSS vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to a ashop/catalogue.php and b ashop/basket.php, the 2 exp parameter to ashop/catalogue.php, the 3 searchstrin...
CVE-2007-0056
Multiple cross-site scripting XSS vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to a ashop/catalogue.php and b ashop/basket.php, the 2 exp parameter to ashop/catalogue.php, the 3 searchstrin...
AShop Shopping Cart Multiple XSS Vulnerabilities
Ashop Commerce provides a turn-key ecommerce solution with it's revolutionary online store building software. One of the worlds most easy to use web based administrations with award winning features allows the merchant to set up an online store capable of competing with the webs most powerful...
AShop Deluxe 4.5 - editcatalogue.php Cross-Site Scripting
AShop Deluxe 4.5 - editcatalogue.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker ma...
AShop Deluxe 4.5 - shipping.php Cross-Site Scripting
AShop Deluxe 4.5 - shipping.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may...
AShop Deluxe 4.5 - search.php Cross-Site Scripting
AShop Deluxe 4.5 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may...
AShop Deluxe 4.5 - salesadmin.php Cross-Site Scripting
AShop Deluxe 4.5 - salesadmin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may...
AShop Deluxe 4.5 - 'editcatalogue.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code...
AShop Deluxe 4.5 - 'salesadmin.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code...
CVE-2006-6756
The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXPCODE in mainfile.php, which might allow remote attackers to gain access to the administration panel via a brute force attack...
CVE-2006-6756
The vulnerability concerns Ixprim 1.2. The code function in install.fct.php generates a guessable value for the confidential IXP_CODE stored in mainfile.php, which could allow remote attackers to brute-force access to the administration panel. The available documentation links this to a remote-ex...
CVE-2006-6756
The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXPCODE in mainfile.php, which might allow remote attackers to gain access to the administration panel via a brute force attack...
XSS in JAB Guest Book
Script Name: JAB Guest Book Authors: [email protected] Website: James Barnsley Bug Report: NetJackal njAThackerzDOTir & nima501ATyahooDOTcom Status: Patch not released First i should apologize for my bad english. Intro: JAB Guest Book is a free guest book written in PHP, it works using flat fil...
SIMPLOG 0.9.3 injection sql & multiple xss
SIMPLOG 0.9.3 cms website : http://www.simplog.org/ xss: Administration Panel - user.php Name URL Email API Key Flickr Email Flickr Password - news.php URL - edit.php Title Entry Manual TrackBack = risk very low SimpLog User Part...
OpenFAQ - HTML injection and XSS (Cross Site Scripting)
Script: OpenFAQ Version: 0.4.0 previous version probably too. Language: PHP Problem: HTML injection and XSS Cross Site Scripting Vendor: http://sourceforge.net/projects/openfaq Discovered by: Kamil 'K3' Sienicki Description: OpenFAQ is a PHP application that lets Webmasters administrate a...