DomPHP 0.83 - Directory Traversal

A directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impacts via a .. dot dot in the url parameter to photoalbum/index.php. id: CVE-2014-10037 info: name: DomPHP 0.83 - Directory Traversal author: daffainfo severity: high description: A...

EUVD-2008-6034

Malware in sbrugna...

EUVD-2014-1110

Malware in sbrugna...

EUVD-2008-0294

Malware in sbrugna...

EUVD-2008-0293

Malware in sbrugna...

EUVD-2008-0755

Malware in sbrugna...

EasyPX CMS 06.02.04 Cross Site Scripting

==================================================================================================================================== | Title : EasyPX CMS V06.02.04 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2 32-bit | | Vend...

DomPHP <= 0.83 SQL Injection

DomPHP = 0.83 SQL Injection in agenda/indexdate.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

CVE-2014-10038

SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...

CVE-2014-10037

Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. dot dot in the url parameter to photoalbum/index.php...

Sql injection

SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...

Directory traversal

Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. dot dot in the url parameter to photoalbum/index.php...

CVE-2014-10037

Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. dot dot in the url parameter to photoalbum/index.php...

CVE-2014-10038

SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...

CVE-2014-10038

The CVE-2014-10038 entry details an SQL injection vulnerability in agenda/indexdate.php affecting DomPHP 0.83 and earlier. The issue allows remote attackers to execute arbitrary SQL commands via the ids parameter. This is the explicit impact stated in multiple sources; no remediation steps are de...

CVE-2014-10037

DomPHP 0.83 and earlier is affected by a directory traversal vulnerability. The Nuclei template details that an attacker can exploit via a part of the URL parameter to photoalbum/index.php (.. traversal) to read, modify, or delete sensitive files on the server. The CVE entry confirms this issue w...

PT-2015-3682

Name of the Vulnerable Software and Affected Versions DomPHP versions 0.83 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the ids parameter in the "agenda/indexdate.php" file. Recommendations For DomPHP versions 0.83 and earlier, update...

CVE-2014-10038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...

PT-2015-3681

Name of the Vulnerable Software and Affected Versions DomPHP versions 0.83 and earlier Description A directory traversal issue exists, allowing remote attackers to have an unspecified impact by including a .. dot dot in the url parameter to the "photoalbum/index.php" endpoint. Recommendations For...

CVE-2014-10037: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. dot dot in the url parameter to photoalbum/index.php...