CVE-2010-4612

Hycus CMS 1.0.3 is affected by CVE-2010-4612: multiple SQL injection in index.php when magic_quotes_gpc is disabled. Vulnerable parameters include user_name and usr_email (hregister.html, hlogin.html), useremail (forgotpass.html), and q (search.html). Root cause is input sanitation flaws allowing...

CVE-2010-4609

CVE-2010-4609 affects Html-edit CMS 3.1.8, with an SQL injection in index.php via the nuser parameter in the registrate action. The vulnerability allows remote attackers to execute arbitrary SQL commands, potentially reading or modifying database contents. The available connected documents confir...

Tunngavik CMS SQL Injection / Cross Site Scripting

======================================================= Tunngavik CMS Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Joomla Lyftenbloggie Cross Site Scripting

Joomla Component comlyftenbloggie XSS/HTML Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /\ \ /\ \ \ \ \L\ \ \ \ \ /\ \ \ \ /',\ \ /\ /\ /\ \ /'\ /' \ /'\ \ \ /\ /, \ \ \ \ \ \ \ \ \ /\ \L./\ /\ /\ / \ \ \// \ \ \ \/ \ /.\ \ \ \...

eclime index.php ref Parameter SQL Injection

The version of eclime hosted on the remote web server fails to sanitize input to the 'ref' parameter of the 'index.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' setting, an unauthenticated remote attacker can leverage this issue to manipulate SQL queries an...

Directory traversal

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to index.php...

CVE-2010-4330

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to index.php...

Alguest 1.1c-patched SQL Injection

New eVuln Advisory: SQL Injection vulnerability in Alguest Summary: http://evuln.com/vulns/154/summary.html Details: http://evuln.com/vulns/154/description.html -----------Summary----------- eVuln ID: EV0154 Software: Alguest Vendor: n/a Version: 1.1c-patched Critical Level: medium Type: SQL...

CVE-2010-4280

Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via 1 the idgroup parameter in an operation/agentes/veragente action to ajax.php or 2 the groupid parameter in an operation/agentes/estadoagente action to index.ph...

CVE-2010-4280

Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via 1 the idgroup parameter in an operation/agentes/veragente action to ajax.php or 2 the groupid parameter in an operation/agentes/estadoagente action to index.ph...

CVE-2010-4360

CVE-2010-4360 refers to multiple SQL injection vulnerabilities in Jurpopage 0.2.0, exploitable via the (1) note and (2) pg parameters in index.php, per the initial description and corroborating Red Hat entries. The connected documents confirm the same vulnerability pattern and provide no details ...

ecshop v2. 7 2 demo/index. php file getshell vulnerabilities-vulnerability warning-the black bar safety net

//------------------------------------------------------------- Release date: 2010-11. 2 6 Publishing author: xhming Affected version: ecshop v2. 7 2 Official address: Vulnerability type: code execution Vulnerability description: Vulnerability analysis: demo/index.php if ! empty$POST'lang'...

C&PR Studio <= (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== C&PR Studio Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Memb...

Voxpopulime CMS <= (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Voxpopulime CMS Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout...

Sql injection

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

CVE-2010-4298

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

C&PR Studio SQL Injection

================================================================ C&PR Studio Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Voxpopulime CMS SQL Injection

================================================================ Voxpopulime CMS Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Pecio CMS 'target' Parameter Cross Site Scripting Vulnerability

The host is running Pecio CMS and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbpeciocmsxssvuln.nasl 5794 2017-03-30 13:52:29Z cfi $ pecio cms 'target' Parameter Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Arabian Youtube Script Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Arabian Youtube Script Blind SQL Injection Vulnerability ======================================================== =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The...