Loggix Project 9.4.5 - Multiple Remote File Inclusions

In The Name Of Allah Loggix Project = 9.4.5 Multiple Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/loggix/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA Blog : http://sh3ll4u.blogspot.com Dork : No DoRk f0R ScRipT...

CVE-2009-3118

The CVE-2009-3118 entry concerns Danneo CMS

CVE-2009-3118: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the comtext parameter, in conjunction with crafted comname and comtitle parameters, in a poll action to index.php, related to...

CVE-2009-2853

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to 1 admin-footer.php, 2 edit-category-form.php, 3 edit-form-advanced.php, 4 edit-form-comment.php, 5 edit-link-category-form.php, 6 edit-link-form.php, 7 edit-page-form.php, and 8 edit-tag-form.php in wp-admin...

Cross site scripting

Cross-site scripting XSS vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php...

CVE-2009-0455

The CVE concerns glFusion’s anonymous comments feature. Affected product/version: glFusion 1.1.0, 1.1.1, and earlier. Vulnerability: Cross-site scripting (XSS) in lib-comment.php allowing remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php. Root cause...

CVE-2009-0455: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php...

Directory traversal

Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery ESPG 1.72 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter. NOTE: the vulnerability may be in my little homepage Comment script. If so, then this should not be treated as ...

CVE-2009-0331: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery ESPG 1.72 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter. NOTE: the vulnerability may be in my little homepage Comment script. If so, then this should not be treated as ...

ESPG 1.72 File Disclosure

.::ESPG 1.72 File Disclosure Vulnerability::. = Scriptname: ESPG Enhanced Simple PHP Gallery 1.72 = Vendor: http://quirm.net = Download: http://quirm.net/download/21/ = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greetings: str0ke, TheJT, Maria, Alucard, x0r32 = Vulnerable Code in...

ESPG (Enhanced Simple PHP Gallery) 1.72 - File Disclosure

ESPG Enhanced Simple PHP Gallery 1.72 - File Disclosure .::ESPG 1.72 File Disclosure Vulnerability::. = Scriptname: ESPG Enhanced Simple PHP Gallery 1.72 = Vendor: http://quirm.net = Download: http://quirm.net/download/21/ = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greetings: str0ke,...

ESPG (Enhanced Simple PHP Gallery) 1.72 File Disclosure Vulnerability

No description provided by source. .::ESPG 1.72 File Disclosure Vulnerability::. = Scriptname: ESPG Enhanced Simple PHP Gallery 1.72 = Vendor: http://quirm.net = Download: http://quirm.net/download/21/ = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greetings: str0ke, TheJT, Maria, Alucard...

CVE-2008-4043: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to 1 acme/article/comment.php and 2 prime/article/comment.php...

AJ HYIP ACME (comment.php artid) SQL Injection Vulnerability

No description provided by source. proud to be muslim rEm0te sql injction VulnErability ajhyip manager script AuTh0r : security fears team Home : WwW.alsonaa.com members: HeB4RieH , germay...

AJ HYIP ACME (comment.php artid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ AJ HYIP ACME comment.php artid SQL Injection Vulnerability ============================================================ proud to be muslim rEm0te sql injction VulnErability ajhyi...

CVE-2008-3378

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter...

Sql injection

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2008-3378

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2008-3378

CVE-2008-3378 describes an SQL injection in the PHP file comment.php of Fizzmedia 1.51.2 , exploitable by remote attackers via the mid parameter to execute arbitrary SQL commands. The connected documents confirm the vulnerable component and the injection vector but do not provide details on explo...

CVE-2008-3378: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter...