Sql injection

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-4604

CVE-2008-4604 affects Easy CafeEngine 1.1. Affected component: index.php. Vulnerability: SQL injection in the itemid parameter in index.php, enabling remote execution of arbitrary SQL commands. Root cause: improper sanitization of input leading to SQL injection. Impact as stated by sources: parti...

Directory traversal

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

Kure 0.6.3 - 'index.php' Local File Inclusion

Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability url: http://code.google.com/p/kure/downloads/list Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

PHP Easy Downloader 1.5 - 'file' File Disclosure

::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit: http://www.target.com/phpeasydownloader/index.php?file=index.php milw0rm.com...

CVE-2008-4570

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-4570

CVE-2008-4570 describes an SQL injection in Real Estate Classifieds: index.php vulnerable via the cat parameter, allowing remote SQL commands. Affected software/component: Real Estate Classifieds (index.php). Root cause: improper input handling enabling injected SQL. Impact (per NVD): partial con...

Real Estate Classifieds 'index.php' SQL注入漏洞

BUGTRAQ ID: 31723 CNCAN ID：CNCAN-2008101408 Real Estate Classifieds是一款基于PHP的WEB应用程序。 Real Estate Classifieds不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'cat'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Real Estate Scripts Real Estate Classifieds 目前没有解决方案提供：...

Real Estate Scripts 2008 (index.php cat) SQL Injection Vulnerability

No description provided by source. Author : EgY Coders TM Hakxer Home : Www.educ-up.com Type Gap : SQL INJECTION script : Real-Estate-Scripts see script http://www.real-estate-scripts.com/demo.html Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 ,Bright...

res-sql.txt

Author : EgY Coders TM Home : Www.educ-up.com Type Gap : SQL INJECTION script : Real-Estate-Scripts see script http://www.real-estate-scripts.com/demo.html Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 ,Bright D@rk + Bug in : index.php POC...

My PHP Indexer 1.0 - index.php Local File Download

My PHP Indexer 1.0 - index.php Local File Download My PHP Indexer 1.0 index.php Local File Download Vulnerability url: http://sourceforge.net/projects/myphpindexer/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for...

LokiCMS <= 0.3.4 (index.php page) Arbitrary Check File Exploit

Exploit for unknown platform in category web applications ============================================================== LokiCMS = 0.3.4 index.php page Arbitrary Check File Exploit ============================================================== LokiCMS = 0.3.4 index.php page Arbitrary Check File...

Real Estate Scripts 2008 - &#039;cat&#039; SQL Injection

Author : EgY Coders TM Home : Www.educ-up.com Type Gap : SQL INJECTION script : Real-Estate-Scripts see script http://www.real-estate-scripts.com/demo.html Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 ,Bright D@rk + Bug in : index.php POC...

Joomla Videos 1.0.0 SQL Injection

Joomla Component comvideos SQL Injection Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" Component: "Videos comvideos" Version: "1.0.0" Author: "Newgekko" Author E-mail: "[email protected] " Author URL: "www.newgekko.com"...

eebcms-xss.txt

--------------------------------------------------------------------------------- EEB-CMS V 0.95 index.php?content -XSS- Cross Site Scripting Vulnerabilities http://www.eeb-welt.de/index.php?content=eebcmsinformation ------------------------------------------------------------ Bug founded by d3v1...

Joomla Component mad4joomla SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Joomla Component mad4joomla SQL Injection Vulnerability ======================================================= Joomla Component Mad4Joomla Mailforms SQL Injection Vulnerability...

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection Joomla Component Ignite Gallery SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla"...

CVE-2008-4519

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

CVE-2008-4526

Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter to 1 index.php, 2 forums.php, 3 admin.php, 4 header.php, 5 pages/story.php and 6 pages/poll.php...