PT-2011-1218

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 2.x through 3.x prior to 3.3 Description The issue is related to multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to add and execute commands of their choice through the use of...

Code injection

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter FTP-Server field to the sicore/updates/optionssav operation for index.php...

CVE-2011-0635

CVE-2011-0635 affects Simploo CMS 1.7.1 and earlier. The vulnerability is a static code injection flaw where remote authenticated users can inject arbitrary PHP into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation of index.php. ...

CVE-2011-0635

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter FTP-Server field to the sicore/updates/optionssav operation for index.php...

CVE-2011-0635: Improper Control of Generation of Code

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter FTP-Server field to the sicore/updates/optionssav operation for index.php...

PT-2011-2513

Name of the Vulnerable Software and Affected Versions Simploo CMS versions 1.7.1 and earlier Description The issue allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter in the "FTP-Server field" to the sicore/updates/optionssav...

PT-2011-2417

Name of the Vulnerable Software and Affected Versions LotusCMS Fraise version 3.0 Description A directory traversal issue exists in the core/lib/router.php file of LotusCMS Fraise. This issue allows remote attackers to include and execute arbitrary local files when the magic quotes gpc setting is...

Multiple Vulnerabilities in ReOS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ReOS which could be exploited to perform SQL injection attacks and compromise vulnerable system. 1 SQL injection vulnerabilities in ReOS 1.1 The vulnerability exists due to input sanitation errors in the...

PT-2011-2410

Name of the Vulnerable Software and Affected Versions Joomla! component com allcinevid version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the "index.php" endpoint. Recommendations For version 1.0.0, avo...

CVE-2011-0511: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the allCineVid component comallcinevid 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CmsEasp 2.0.0 LFI vulnerability

易通企业网站系统也称易通企业网站程序，是易通公司开发中国首套免费提供企业网站模板的营销型企业网站管理系统，系统前台生成html、完全符合SEO、同时有在线客服、潜在客户跟踪、便捷企业网站模板制作、搜索引擎推广等功能的企业网站系统。 CmsEasp 2.0.0 null http://server/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00...

Sql injection

Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the 1 filterorder or 2 filterorderDir parameter in a comcontact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this...

Joomla! Component com_people 1.0.0 - Local File Inclusion

Author : altbta [email protected] Home : xp10.com Script : Joomla Component compeople Bug Type : Local File Inclusion Vulnerability Dork : inurl:"/index.php?option=compeople" Vendor : http://www.ptt-solution.com === Exploit === LFI...

LifeType 1.2.10 HTTP Referer stored XSS

Exploit for php platform in category web applications Exploit Title: lifetype 1.2.10 http referer XSS Date: 11-1-2010 Author: Saif El-Sherei Software Link: http://lifetype.net/page/downloads Version: 1.2.10 Tested on: firefox 3.0.15 failure to sanitize the http referer header in index.php results...

PT-2011-2346 · Tinybb · Tinybb

Name of the Vulnerable Software and Affected Versions: tinyBB version 1.2 Description: The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This can be achieved via the id parameter in a profile action to "index.php". Recommendations: For tinyBB...

CVE-2011-0443: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2011-0005

Cross-site scripting XSS vulnerability in the comsearch module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.php...

CVE-2011-0005: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the comsearch module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.php...

PT-2011-2008

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.0.x through 1.0.15 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the ordering parameter to the "index.php" API endpoint. Recommendatio...

Elxis CMS 2009.2 Remote file include vulnerbility

Exploit for php platform in category web applications elxis2009.2electrarev2631 installation folder.'; include$mosConfigabsolutepath.'/includes/systemplates/router.php'; exit; requireonce$mosConfigabsolutepath.'/includes/Core/loader.php'; file : index2.php...