CVE-2010-1979

Directory traversal vulnerability in the Affiliate Datafeeds comdatafeeds component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1955

Directory traversal vulnerability in the Deluxe Blog Factory comblogfactory component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

PHP Gamepage SQL Injection

, | ,---. , . |---. ,---. ,---. ,---. ,---. ,---. , . , | --- | | | | | |---' | | | |---' | | | | ---' ---| ---' ---' ---' ---' ------ ---' V PHP Gamepage SQL Injection Vulnerability --== Author ==-- + Author : v4lc0m87 + Contact : valcom87atgmaildotcom + Group : INDONESIAN CYBER + Site :...

JE CMS version 1.1 SQL Injection Vulnerability

No description provided by source. ========================================================================================================================================================== o JE CMS SQL Injection Vulnerability Software : JE CMS version 1.1 Vendor : http://joenasejes.cz.cc/ Author...

Tainos - Multiple Vulnerabilities

Tainos - Multiple Vulnerabilities ======================================================= Tainos Multiple Vulnerabilities ======================================================= Name: Tainos Multiple Vulnerabilities Vendor: www.tainos-webdesign.com Date: 2010/05/16 Author: Ashiyane Digital Securi...

Web Design Solutions SQL Injection

JAI HIND Tybe: SQL Injection Vulnerabilities Vendor: http://www.webdesignsolution.co.uk + author: мαsŧєяs + TEAM: H.O.H------ICW--------ANDHRAHACKERS D0rk: Us3 ur brain ? contact: rdon111 AT gmail.com ====================================================================================== SQL...

Joomla Component com_jequoteform Local File Inclusion

Exploit for php platform in category web applications ===================================================================== Joomla Component comjequoteform Local File Inclusion Vulnerabilities ===================================================================== Author : altbta Email :...

JE Ajax Event Calendar Local File Inclusion Vulnerability

Exploit for php platform in category web applications ========================================================= JE Ajax Event Calendar Local File Inclusion Vulnerability ========================================================= :::::::::::::::::::::::::::::::::::::: 0x1...

Sql injection

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

CVE-2010-1924

CVE-2010-1924 describes an SQL injection in index.php of the Hi Web Wiesbaden Live Shopping Multi Portal System, exploitable via the artikel parameter to execute arbitrary SQL commands. The affected component is the index.php entry point; root cause is insecure handling of user-supplied input in ...

CVE-2010-1924

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

724CMS Enterprise 4.59 SQL Injection

Exploit Title: 724CMS Enterprise Version 4.59 Multiple SQL Injections Date: 11-5-10 Author: t@nzo0n Version: 4.59 Enterprise Code : section.php x Variable : Lang x Exploit : http://target.com/section.php?Nav=Section&ID=5&Lang=sqlinjection index.php x Variable : autoslide x Exploit :...

CVE-2009-4869

Cross-site scripting XSS vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Sql injection

DISPUTED SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Free Advertisment CMS - user_info.php SQL Injection

Free Advertisment CMS - userinfo.php SQL Injection ========================================================= Free Advertisment cms userinfo.php SQL Injection Vulnerability ========================================================= Name: Free Advertisment cms userinfo.php SQL Injection Vulnerabilit...

CVE-2009-4855

TYPO3 4.0 is affected by a SQL injection vulnerability in index.php via the showUid parameter. The root cause is an injectable showUid value, enabling remote attackers to alter SQL commands. The TYPO3 Security Team disputes the report, noting the showUid parameter is commonly used in third‑party ...

CVE-2009-4869

Cross-site scripting XSS vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Waibrasil - Local/Remote File Inclusion

Title: Waibrasil Remote / Local File Inclusion Date: 10-05-2010 Author: eXeSoul Vendor: www.waibrasil.com.br category: RFI / LFI Version: webapps Tested on: Apcahe/Unix VCE: Code : hhttp://thttp://thttp://phttp://:http:////http://http://http://http://http://http://server/c99.txt? Dork :...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in RepairShop2 1.9.023 Trial, when magicquotesgpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action...