CVE-2007-3976

SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

Sql injection

SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action...

CVE-2007-3968

index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name...

CVE-2007-3976

CVE-2007-3976 affects bwired where SQL injection is possible in index.php via the newsID parameter. The underlying issue is improper handling of the newsID input, allowing remote attackers to craft arbitrary SQL commands. Impact is described as arbitrary SQL execution; the connected materials do ...

CVE-2007-3981

CVE-2007-3981 : SQL injection in index.php of WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action. Connected documents confirm the vulnerability details; no remediation or exploit status provided in the sources.

CVE-2007-3968

CVE-2007-3968 affects the dirLIST project prior to version 0.1.1. A remote attacker can cause disclosure of directory contents by issuing a crafted URL containing an excluded folder name. This yields partial confidentiality impact (C:N/I:N/A:L per CVSS v3.1) with network access and no authenticat...

CVE-2007-3976

SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

CVE-2007-3981

SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action...

articledir-rfi.txt

dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected] greetz:d3hydr8, whoami pace...

Article Directory - index.php Remote File Inclusion

Article Directory - index.php Remote File Inclusion dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected]...

Article Directory (index.php page) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Article Directory index.php page Remote File Inclusion Vulnerability ======================================================================...

Sql injection

SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

blogsite-sql.txt

--==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK:...

MD-Pro < 1.0.82 index.php topicid Parameter SQL Injection

Binary data 4143.prm...

Blog System 1.x - index.php?news_id SQL Injection

Blog System 1.x - index.php?newsid SQL Injection --==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHO...

Sql injection

Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the 1 date and 2 limit parameters to index.php, and other unspecified vectors...

LFI On SMF 1.1.3

LFI On SMF 1.1.3 Download Page http://www.simplemachines.org/download/ Error code in index.php line 334 requireonce$sourcedir . '/' . $actionArray$REQUEST'action'0; Happy hacking...

Sql injection

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the search action, possibly related to the term parameter to index.php; or 2 an anonymous blog entry, possibly involving the a postedby, b...

Sql injection

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...