CVE-2009-4934

Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

LojaDoSite Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ LojaDoSite Blind SQL Injection Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Joomla Component com_sef LFI Vulnerability

Exploit for php platform in category web applications ========================================== Joomla Component comsef LFI Vulnerability ========================================== Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomsef.zip Version: 0 Tested on: all OS CVE : 0...

Sandbox 2.0.2 - Local File Inclusion

: Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: + PoC:http://localhost/index.php?a=../../../../../etc/passwd%00...

Sandbox v2.0.2 Local FIle Inclusion Vulnerability

Exploit for php platform in category web applications ================================================= Sandbox v2.0.2 Local FIle Inclusion Vulnerability ================================================= : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.co...

Sandbox 2.0.2 - Local File Inclusion

Sandbox 2.0.2 - Local File Inclusion : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: +...

CVE-2010-2613

Cross-site scripting XSS vulnerability in the JExtensions JE Awd Song comawdsong component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, which is not properly handled in a view action to index.php...

CVE-2010-1522

Multiple SQL injection vulnerabilities in the BookLibrary Basic combooklibrary component 1.5.3 before 1.5.320100620 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid parameter in a 1 lendrequest or 2 savelendrequest action to index.php, the id parameter in a 3...

InteRa CMS (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== InteRa CMS index.php Blind SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Ecomat CMS - SQL Injection

Ecomat CMS - SQL Injection Vulnerability ID: HTB22390 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinecomatcms.html Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor Notification: 18 May 2010 Vulnerability Type: SQL...

CVE-2010-2514

Cross-site scripting XSS vulnerability in the JFaq comjfaq component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action to index.php...

Clix'N'Cash Clone 2010 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/41202/info Clix'N'Cash Clone 2010 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

PageDirector CMS - Multiple Vulnerabilities

PageDirector CMS - Multiple Vulnerabilities Exploit Title : PageDirector CMS Multiple Vulnerabilities Date : 20 - 6 - 2010 Author : Tr0y-x Vendor : www.customerparadigm.com Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM Price : 675.00 $ loooooolz -== SQL Injection Vulenrability =...

WAFER (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== WAFER index.php Blind SQL Injection Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /...

CVE-2010-2457

Cross-site scripting XSS vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script or HTML via the term parameter...

CVE-2010-2457

Technical details beyond the basic XSS description are not publicly available in the provided connected documents. CVE-2010-2457 is described as XSS in K-Search index.php via the term parameter; monitor for updates for fixes or affected versions.

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords...

CVE-2009-4906

CVE-2009-4906 is a CSRF vulnerability affecting Acc PHP eMail 1.1 (index.php). The issue allows remote attackers to hijack administrator authentication for requests that change passwords. Connected sources provide the same description across multiple feeds; CVSS2 base score is 6.8 (Medium) with n...

CVE-2009-4903

CVE-2009-4903 describes a Cross-site Scripting (XSS) flaw in the web app oBlog . The vulnerability is in the file index.php and is exploitable via the search parameter , allowing remote attackers to inject arbitrary script/HTML. The NVD entry notes a non-authoritative provenance (“NOTE: the prove...