CVE-2010-3455

CVE-2010-3455 is an XSS vulnerability in AChecker 1.0 . The flaw resides in the code path for index.php where the uri parameter is insufficiently sanitized, allowing remote attackers to inject arbitrary HTML/JavaScript. Demonstrated payloads and exploitation details appear in multiple sources (e....

CVE-2010-3418

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 carid parameter to index.php and 2 y parameter to include/images.php...

Joomla Component com_read SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Joomla Component comread SQL Injection vulnerability ===================================================== + Exploit Title : Joomla Component read SQL injection vulnerability + Author :...

Cross site scripting

Cross-site scripting XSS vulnerability in ajax.php in Wiccle Web Builder WWB 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the posttext parameter in a site customsearch action to index.php. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in the PicSell compicsell component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the dflink parameter in a prevsell dwnfree action to index.php...

Global Event Source (index.php) Blind Sql Injection Vulnerability

Exploit for php platform in category web applications ================================================================= Global Event Source index.php Blind Sql Injection Vulnerability ================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected ....

PHP Joke Site Software - sbjoke_id SQL Injection

PHP Joke Site Software - sbjokeid SQL Injection Title: PHP Joke Site Software sbjokeid SQL Injection Vuln Link: http://www.softbizscripts.com/jokes-script-features.php Author: BorN To K!LL - h4ck3r 3xploit:...

Web-Ideas Web Shop Standard - SQL Injection

Exploit Title: SQL injection in web-ideas web shop standard Date: 31.08.2010 Author: Ariko-Security Software Link: http://www.web-ideas.com.au/web-shopstandard Version: ALL Tested on: ALL CVE : n/a Ariko-Security: Security Audits , Audyt bezpieczeństwa Advisory: 728/2010 ============ Ariko-Securi...

GaleriaSHQIP 1.0 SQL Injection

Exploit Title: GaleriaSHQIP SQL Injection Vulnerability Date: 28.08.2010 Author: Valentin Category: webapps/0day Version: v1.0 full Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = GaleriaSHQIP S...

Seagull v0.6.7 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== Seagull v0.6.7 SQL Injection Vulnerability ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

Textpattern RFI Vulnerability

Exploit for php platform in category web applications ============================= Textpattern RFI Vulnerability ============================= Textpattern index.php -------------------------------------------------------------- + Author : Sn!pEr.S!Te Hacker + Email : email protected + Inj3ct0r...

textpattern CMS 4.2.0 - Remote File Inclusion

textpattern CMS 4.2.0 - Remote File Inclusion Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Textpattern index.php -------------------------------------------------------------- + Author : Sn!pEr.S!Te Hacker + Email :...

CVE-2009-4989

The CVE-2009-4989 entry concerns an XSS vulnerability in AJ Auction Pro OOPD 3.0, specifically in index.php where the txtkeyword parameter in a search action can be exploited to Inject arbitrary web-script/HTML. Affected component: index.php of AJ Auction Pro OOPD 3.0. Underlying cause: cross-sit...

Gazelle CMS - Multiple Vulnerabilities

Gazelle CMS - Multiple Vulnerabilities Exploit Title: AnantaGazelle Local File inclusion / Xss Vulnerabilities Date: 23/08/2010 Author: Sweet Contact : [email protected] Software Link: www.anantasoft.com Download:http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Version: AnantaGazelle1...

Flex-Com (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Flex-Com index.php Blind SQL Injection Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /...

Free Simple Software 1.0 - Remote File Inclusion

Free Simple Software 1.0 - Remote File Inclusion Free Simple Software V1.0 By : Dr.$audi SauDi ViRuS TeaM By : http://Sa-ViRuS.CoM Email : [email protected] Dork: Powered by free simple software Greets : RENO , Dr.php , ! BaD BoY ! , Gov.HaCkEr , Mind , AnTi SeCuRe Script HomePage:...

MailForm 1.2 Remote File Inclusion

Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://scripts.bdr130.net/files/any/MailForm.zip Version: v 1.2 Tested on: Windows XP CVE : هكر المسيب Contact: LoSt.HaCkEratyahoodotcom /0r/ [email protected]...

CVE-2010-3027

An SQL injection in Tycoon Baseball Script 1.0.9 (index.php) allows remote execution via the game_id parameter in a game_player action. This is reported across multiple sources (NVD, Red Hat, CVE List, PRION) with base CVSS2 score 7.5 (HIGH). The connected documents do not provide a patch or work...

MailForm 1.2 - Remote File Inclusion

MailForm 1.2 - Remote File Inclusion Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://scripts.bdr130.net/files/any/MailForm.zip Version: v 1.2 Tested on: Windows XP CVE : هكر المسيب Contact: LoSt.HaCkEratyahoodotcom /0r/ ...

MailForm 1.2 Remote File Include Vulnerability

Exploit for php platform in category web applications ============================================== MailForm 1.2 Remote File Include Vulnerability ============================================== Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software...