PHP-Sugar 0.80 - index.php?t Local File Inclusion

PHP-Sugar 0.80 - index.php?t Local File Inclusion =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=- script: PHP-Sugar 0.80 ----------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://php-sugar.net/files/?mod=files...

PHP-Sugar 0.80 (index.php t) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP-Sugar 0.80 index.php t Local File Inclusion Vulnerability =============================================================== =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=...

CVE-2008-6839

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

CVE-2008-6839

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

Mega File Manager 1.0 (index.php page) LFI Vulnerability

Exploit for unknown platform in category web applications ======================================================== Mega File Manager 1.0 index.php page LFI Vulnerability ======================================================== + Mega File Manager 1.0 index.php page Local File Inclusion...

CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2009-2151

Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. dot dot in the newlang parameter...

Sql injection

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2100

Directory traversal vulnerability in the JoomlaPraise Projectfork comprojectfork component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php...

CVE-2009-2107

Webmedia Explorer (webmex) is affected by CVE-2009-2107 across versions 5.0.9 and 5.10.0, with multiple XSS in index.php. The root cause is insufficient sanitization of user-supplied data, allowing attackers to inject script via parameters such as search, tag, bookmark, and remember, among others...

CVE-2009-2100

Directory traversal vulnerability in the JoomlaPraise Projectfork comprojectfork component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php...

Uebimiau Web-Mail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities

No description provided by source. Uebimiau Webmail = v3.2.0-1.8 Remote File / Overwrite Vulnerabilities Dork : Uebimiau Webmail v3.2.0-1.8 POC : /uebimiau/admin/editor.php?load=config And You Can Write Any Code As ?php passthru$GETcmd; ? After That Click Write To File Go /uebimiau/index.php?cmd=...

CVE-2009-2037

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

CVE-2009-2033

CVE-2009-2033: XSS in Yogurt 0.3, via index.php msg parameter. Vulnerable component is index.php; root cause is input not sanitized, enabling remote injection of script/HTML. No remediation details provided in the supplied documents; exploitation status not specified.

campus virtual-lms - Cross-Site Scripting SQL Injection

campus virtual-lms - Cross-Site Scripting SQL Injection +-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009...

Yogurt 0.3 SQL Injection / XSS

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

yogurt 0.3 - Cross-Site Scripting / SQL Injection

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

School Data Navigator - page LocalRemote File Inclusion

School Data Navigator - page LocalRemote File Inclusion ---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.z...

School Data Navigator - 'page' Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.zip...