CVE-2009-0133

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564...

CVE-2009-0133

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564...

CVE-2008-4611

SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter...

CVE-2008-4592

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

CVE-2008-4570

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

sportsclubs-lfi.txt

--==+============================================================================+==-- --==+ Sports Clubs Web Panel 0.0.1 Local File Inclusion Vulnerability +==-- --==+============================================================================+==-- Discovered By: StAkeR [email protected] +...

CVE-2008-2846

SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL commands via the type parameter...

CVE-2008-2837

SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter...

CVE-2008-2796

SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2008-2232 · Mambo Foundation +2 · Mambo +2

Name of the Vulnerable Software and Affected Versions: com sobi2 version 2.5.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the catid parameter in the index.php file of the com sobi2 component for Joomla! and Mambo. Recommendations: For...

CVE-2003-1334

CVE-2003-1334 affects Kai Blankenhorn’s Bitfolge (snif) index file before 1.2.7. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the issue but do not provide concret...

CVE-2007-4264

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

CVE-2007-4264

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

CVE-2007-4264

The CVE-2007-4264 issue affects Kai Blankenhorn’s Bitfolge simple and nice index file (snif) versions 1.5.2 and earlier. The vulnerability resides in index.php where cross-site scripting (XSS) can be triggered via the (1) path parameter and the (2) download parameter, allowing remote attackers to...

AL-Athkar.v2.0 Remote File Include

Discovred By : Hasadya Raed ---------------------------- Contact : [email protected] , [email protected] , [email protected] ---------------------------- Greetz : Fairoz ---------------------------- Script: AL-Athkar.v2.0 ---------------------------- Download:...

PT-2007-3744 · Sphider · Sphider

Name of the Vulnerable Software and Affected Versions: Sphider versions 1.2.x Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include dir parameter in the index.php file. A third party disputes this issue, stating that the application is not vulnerabl...

ripewm-xss.txt

Ripe Website Manager Ripe Website Manager discovered by John MartinelliGoogle d0rk: "Powered by Ripe Website Manager" alert1;"...

PT-2007-3414 · Ivan · Ivan Gallery Script

Name of the Vulnerable Software and Affected Versions: Ivan Gallery Script version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter in the index.php file. There is a dispute regarding version 0.3, with some researchers stating that th...

PT-2007-3321 · Xoops +1 · Virii Info +1

Name of the Vulnerable Software and Affected Versions: Xoops module Virii Info versions 1.10 and earlier Description: A remote file inclusion issue in the index.php file of the Virii Info module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfigroot path...