13680 matches found
CVE-2010-5055: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2011-1996
Name of the Vulnerable Software and Affected Versions RSStatic affected versions not specified Description A SQL injection issue exists in index.php, allowing remote attackers to execute arbitrary SQL commands via the maxarticles parameter in the "/index.php" endpoint. Recommendations At the...
PT-2011-1986
Name of the Vulnerable Software and Affected Versions razorCMS version 1.0 stable Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to...
PT-2011-1990
Name of the Vulnerable Software and Affected Versions Almnzm version 2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "index.php" endpoint. Recommendations For Almnzm version 2.1, avoid using the id parameter in the...
CVE-2010-5048: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin.jcomments.php in the JoomlaTune JComments comjcomments component 2.1.0.0 for Joomla! allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to index.php...
PT-2011-1994
Name of the Vulnerable Software and Affected Versions CMScout version 2.0.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the album parameter in a "photos" action in the index.php file. Recommendations For CMScout version 2.0.8, consider...
PT-2011-1991
Name of the Vulnerable Software and Affected Versions com gbufacebook version 1.0.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the face id parameter in a show face action to the "index.php" endpoint. Recommendations For version...
PT-2011-1988
Name of the Vulnerable Software and Affected Versions Joomla! component com xobbix version 1.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the prodid parameter in a prod desc action to "index.php". Recommendations For version 1.0.1, avoi...
PT-2011-1983
Name of the Vulnerable Software and Affected Versions JComments com jcomments component version 2.1.0.0 for Joomla! Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to...
phpMyAdmin Setup Interface Cross Site Scripting Vulnerability
phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
phpcms 2008 index.php 跨站脚本攻击漏洞
No description provided by source...
phpcms V9 BLind SQL 注入漏洞
No description provided by source. http://eidelweiss-advisories.blogspot.com/2011/01/phpcms-v9-blind-sql-injection.html ! index.php?m=content&c=rss&catid=valid catid Example p0c ! http://host/index.php?m=content&c=rss&catid=10 = True ! http://host/index.php?m=content&c=rss&catid=-10 = False +...
Digital Attic SQL Injection Vulnerability
Exploit for php platform in category web applications Title : Digital Attic SQL Injection Vulnerability Vendor Link: : http://www.digitalattic.com/ Author : tempemendoan Contact : anu :D Google Dork : inurl:"gorengan tempe" intext:"CMS by Digital Attic" === POC === ? http://website/index.php?id=S...
DLGuard 'index.php' Cross Site Scripting Vulnerability
DLGuard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...
Plum CMS Blind SQL Injection
Coder : baltazar a.k.a b4ltazar CMS name : Plum CMS Site : http://www.plum-design.net && http://www.plum.rs Dork : Powered by PlumDesign : Powered by PlumDesign site:.rs : Powered by PlumDesign site:.com Admin panel : N/A Vulnerability : Sites design with Plum CMS suffers from blind SQL injection...
Joomla 'Teams' Component SQLi Vulnerability (Nov 2011)
Joomla with Teams component is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2010-5043
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
CVE-2010-5020
SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...
