CVE-2008-2837

SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter...

CVE-2008-2837

SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter...

Unfixed XSS vulnerability at www.worldenergy.ru

Security researcher THEMILLER, has submitted on 24/06/2008 a cross-site-scripting XSS vulnerability affecting www.worldenergy.ru, which at the time of submission ranked 1982897 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is...

HiveMaker Directory (index.php cid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== HiveMaker Directory index.php cid SQL Injection Vulnerability =============================================================== proud to be muslim rEm0te sql injction...

cmsmini-lfi.txt

===================================================== CMS Mini 0.2.2 Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

PageSquid CMS (index.php page) Remote SQL Injection Vulnerability

No description provided by source. ===================================================================== PageSquid CMS index.php page Remote SQL Injection Vulnerability ===================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

HoMaP-CMS 0.1 - go SQL Injection

HoMaP-CMS 0.1 - go SQL Injection -------------------------------------------------------------------------------------------------------------------------------- // HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability // Author: SxCx // Download: SourceForge.net // Version affected: 0.1 //...

Demo4 CMS (index.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Demo4 CMS index.php id Remote SQL Injection Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| -------...

MyBizz-Classifieds 'index.php' SQL注入漏洞

BUGTRAQ ID: 29798 CNCAN ID：CNCAN-2008062304 MyBizz-Classifieds是一款基于PHP的WEB应用程序。 MyBizz-Classifieds不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'index.php'脚本对用户提交给"cat"参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 MyBizz-Classifieds 目前没有详细解决方案提供： http://www.mybizz-classifieds.com/...

homap-sql.txt

-------------------------------------------------------------------------------------------------------------------------------- // HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability // Author: SxCx // Download: SourceForge.net // Version affected: 0.1 // Exploit:...

HoMaP-CMS 0.1 (index.php go) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== HoMaP-CMS 0.1 index.php go Remote SQL Injection Vulnerability ===============================================================...

FreeCMS 'index.php' SQL注入漏洞

BUGTRAQ ID: 29773 CNCAN ID：CNCAN-2008061903 FreeCMS是一款基于PHP的WEB应用程序。 FreeCMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'index.php'脚本对用户提交给'page'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 FreeCMS.us FreeCMS 0.2 目前没有解决方案提供： http://www.freecms.us/...

Basic-CMS 'index.php' SQL注入漏洞

BUGTRAQ ID: 29771 CNCAN ID：CNCAN-2008061901 BASIC-CMS是一款基于PHP的WEB应用程序。 BASIC-CMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'index.php'脚本对用户提交给'pageid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 BASIC-CMS 目前没有解决方案提供： http://www.basic-cms.de/...

Bizon-CMS 'photo/index.php' SQL注入漏洞

BUGTRAQ ID: 29770 CNCAN ID：CNCAN-2008061902 Bizon-CMS是一款基于PHP的WEB应用程序。 Bizon-CMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'photo/index.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Bizon-Soft Development Laboratory Bizon-CMS 2.0 漏洞提供者 Mr.SQL [email protected]...

PHP KnowledgeBase Script 2.4 (cat_id) SQL Injection Vulnerability

No description provided by source. PROUD TO BE MUSLIM Remote SQL Injection Vulnerability Knowledge Base Software Overview index.php catid AuTh0r : S.L TEAM FA6@L 3RROR --- H3B@R13H H0ME : WwW.MALAKSOFT.CoM Script : Knowledge Base Software Overview site : www.kblance.com -:: SQL ::- www.site.com/...

emuCMS 0.3 (cat_id) Remote SQL Injection Vulnerability

No description provided by source. AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

phpAuction 3.2.1 - item.php SQL Injection

phpAuction 3.2.1 - item.php SQL Injection phpauction-gpl Version3.2 Version SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...

FubarForum 1.5 (index.php page) Local File Inclusion Vulnerability

No description provided by source. Name : FubarForum v1.5 Local File Inclusion Vulnerability Author : cOndemned Dork : for ex. "Powered by FubarForum v1.5" Greetz : TBH, GregStar, ZaBeaTy, irk4z, Hawk, Sandtalker & Avantura ; Source : // index.php 5. if !empty$GET'page' $page = $GET'page'; // ---...

FireAnt 1.3 (index.php page) Local File Inclusion Vulnerability

No description provided by source. Name : FireAnt v1.3 Local File Inclusion Vulnerability Author : cOndemned Dork : use Your brain : Greetz : ZaBeaTy, str0ke, GregStar, irk4z, Sandtalker & Avantura ; Source : // index.php 8. $page = "buglist"; //default page 9. if !empty$GET'page' 10. $page =...

phpAuction 3.2.1 (item.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= phpAuction 3.2.1 item.php id Remote SQL Injection Vulnerability ================================================================= phpauction-gpl Version3.2 Version SQL...