CVE-2010-4780: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the checkbanlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these...

Pligg CMS 1.1.3 - Multiple Vulnerabilities

Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became evailable; patching took 7 days:...

Pligg CMS 1.1.3 Privilege Escalation / Access Bypass

Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became evailable; patching took 7 days:...

webEdition CMS - Local File Inclusion

webEdition CMS - Local File Inclusion =================================================================== webEdition CMS DOCUMENTROOT Local File Inclusion vulnerability =================================================================== Software: webEdition CMS 6.1.0.2 Vendor:...

SimplisCMS 1.0.3.0 File Disclosure

Exploit Title: SimplisCMS 1.0.3.0 Remote File Disclosure Vulnerability home : http://www.D99Y.com Date: 27/3/2011 Author: NassRawI Software Link: http://modcove.com/index.php Demo : http://modcove.com/index.php?page=demo Version: 1.0.3.0 file : simpliscms/admin/index.php exploit :...

webEdition CMS 6.1.0.2 Local File Inclusion

=================================================================== webEdition CMS DOCUMENTROOT Local File Inclusion vulnerability =================================================================== Software: webEdition CMS 6.1.0.2 Vendor: http://www.webedition.org Vuln Type: Local File Inclusion...

Joomla Component com_ignitegallery SQL injection vulnerability

Exploit for php platform in category web applications Joomla Component comignitegallery SQL injection vulnerability‎ + Author : TiGeRYeMeN HaCkEr + Author Name : TiGEr... + Email : email protected + Greetz : Sa-HaCkEr + Group : No-Group + Vulnerability : SQL injection + Google Dork :...

Sql injection

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

CVE-2010-4770

CVE-2010-4770 is a SQL injection vulnerability in the CommodityRentals DVD Rentals Script, exposed via index.php in the catalog action. The issue allows remote attackers to execute arbitrary SQL commands through the cat_id parameter. Documents confirm the affected software component is the script...

CVE-2010-4770: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

PT-2011-1718

Name of the Vulnerable Software and Affected Versions com jimtawl version 1.0.2 Description The issue allows remote attackers to read arbitrary files and possibly have other impacts via a .. dot dot in the task parameter to "index.php". Recommendations For version 1.0.2, update to a version that...

PT-2011-1719

Name of the Vulnerable Software and Affected Versions CommodityRentals DVD Rentals Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat id parameter in a "catalog" action, which is part of the index.ph...

CVE-2011-0745

SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover 1 the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or 2 t...

PT-2011-2604

Name of the Vulnerable Software and Affected Versions SugarCRM versions prior to 6.1.3 Description The issue allows remote authenticated users to discover sensitive information, including the names of customers and contact persons, by exploiting a flaw in how the software handles reloads and dire...

'Quick Polls' Local File Inclusion & Deletion Vulnerabilities (CVE-2011-1099)

'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...

Maian Weblog 4.0 - Blind SQL Injection

Maian Weblog 4.0 - Blind SQL Injection ?php / maian weblog = v4.0 Remote Blind SQL Injection Exploit vendor: http://www.maianscriptworld.co.uk/ Thanks to Johannes Dahse: http://bit.ly/dpQXMK Explanation: Lines 335 - 341 of the index.php we see this if statement that concerns our variable $bpost. ...

Quick Polls 1.0.1 Local File Inclusion / Deletion

'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...

Quick Polls - Local File Inclusion Deletion

Quick Polls - Local File Inclusion Deletion 'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & loca...

Bo-blog v2.1.1 注入漏洞

inc/modmain.php //漏洞文件： case 'category': if !$job $job='default'; else $job=basename$job; $ifannouncement="none"; acceptrequest'mode'; if $mode==1 || $mode==2 //.......................... elseif !empty$mode && !isnumeric$mode || $mode2 getHttp404$lnc313; //...................... if isnumeric$item...

VidiScript Cross Site Scripting

Exploit Title: VidiScript index.php Cross Site Scripting home : http://www.D99Y.com Author: NassRawI Date: 2/3/2011 Google Dork: "Powered By VidiScript.com" Software Link: http://www.vidiscript.com/ file : index.php exploit : http://localhost/index.php?vp= XSS...