727 matches found
XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== XOOPS module Articles \n"; print "Examp: $0 www.victim.com /path 1\n"; print...
CVE-2006-7052
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles dotwidgeta 0.2 allow remote attackers to execute arbitrary code via a URL in the 1 filepath parameter to a index.php, b showcatpicks.php, and c showarticle.php; and the 2 adminheaderfile and 3 adminfooterfile parameters ...
CVE-2006-7052
The CVE-2006-7052 entry affects DotWidget For Articles (dotwidgeta) version 0.2, where multiple PHP remote file inclusion vulnerabilities exist. An attacker can trigger arbitrary code execution by supplying a URL path in the file_path parameter for index.php, showcatpicks.php, and showarticle.php...
CVE-2006-7052
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles dotwidgeta 0.2 allow remote attackers to execute arbitrary code via a URL in the 1 filepath parameter to a index.php, b showcatpicks.php, and c showarticle.php; and the 2 adminheaderfile and 3 adminfooterfile parameters ...
PHP-Nuke Block-Old_Articles.PHP SQL注入漏洞
PHP-Nuke是一款基于PHP的站点构架程序。 PHP-Nuke不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Block-OldArticles.PHP'脚本对用户提交的'cat'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 PHP-Nuke 7.9 PHP-Nuke 7.8 PHP-Nuke 7.7 PHP-Nuke 7.6 PHP-Nuke 7.5 PHP-Nuke 7.4 PHP-Nuke 7.3 PHP-Nuke 7.2 PHP-Nuke 7.1 PHP-Nuke 7.0 目前没有解决方案提供：...
PHP-Nuke <= 7.9 Old-Articles Block "cat" SQL Injection vulnerability
/ -------------------------------------------------------- Neo Security Team NST - Advisory 31 - 2007-01-13 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke = 7.9 Risk: Medium Impact: Medium Risk -==PHP-Nuke ...
CVE-2006-6925
Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...
Interview:w00w00
w00w00 One of the first to respond to a request for an interview was w00w00 pronounced "woo-woo", their website . A group highly respected among those who are interested in security issues - they have discovered a lot of holes in security systems, many interesting tactics of hacker attacks. The...
eggblog=> 3.1.0 Cross Site Scripting
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM eggblog=...
CVE-2006-4969
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...
CVE-2006-4891
SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...
CVE-2006-4891
SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...
Pie Cart Pro - 'Inc_Dir' Remote File Inclusion
==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...
Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== Pie Cart Pro IncDir Remote File Include Vulnerabilities ==========================================================...
Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities
No description provided by source. ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...
Techno Dreams Articles&Papers Package <=v2.0(ArticlesTableview.asp) Remote SQL Injection Vulnerability
Vulnerability Report Title : Techno Dreams Articles&Papers Package =v2.0ArticlesTableview.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.t-dreams.com Exploit; http://target/path/ArticlesTableview.asp?key='SQL HERE Example:...
Techno Dreams Articles & Papers 2.0 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Techno Dreams Articles & Papers 2.0 Remote SQL Injection Vulnerability ====================================================================== Title : Articles&Papers...
Techno Dreams Articles & Papers 2.0 Remote SQL Injection Vulnerability
No description provided by source. Title : Articles&Papers Package =v2.0ArticlesTableview.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.t-dreams.com Exploit; http://target/path/ArticlesTableview.asp?key='SQL HERE Example:...
PT-2006-5327 · Yet Another Community System · Yacs Cms
Name of the Vulnerable Software and Affected Versions: Yet Another Community System YACS CMS versions 6.6.1 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the contextpath to root parameter. This affects the articles/article.php...
Power articles system arbitrary file delete vulnerability-exposure-vulnerability warning-the black bar safety net
Because their website is continuously being maliciously hacked into twice, from the IIS log seen are“script injection”to blame, this only started to pay attention to script security. A few days ago a friend let me test his website's security situation, so they try their hand, the results actually...