PT-2010-5436

Name of the Vulnerable Software and Affected Versions Jurpopage version 0.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the category parameter in the "index.php" file. Recommendations For Jurpopage version 0.2.0, update to a newer versio...

CVE-2010-4360: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 note and 2 pg parameters, different vectors than CVE-2010-4359. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

PT-2010-5437

Name of the Vulnerable Software and Affected Versions Jurpopage version 0.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the note and pg parameters in the "index.php" file. Recommendations For Jurpopage version 0.2.0, consider restricting...

CVE-2010-4359: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands via the category parameter...

ecshop v2. 7 2 demo/index. php file getshell vulnerabilities-vulnerability warning-the black bar safety net

//------------------------------------------------------------- Release date: 2010-11. 2 6 Publishing author: xhming Affected version: ecshop v2. 7 2 Official address: Vulnerability type: code execution Vulnerability description: Vulnerability analysis: demo/index.php if ! empty$POST'lang'...

C&PR Studio <= (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== C&PR Studio Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Memb...

Voxpopulime CMS <= (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Voxpopulime CMS Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout...

Sql injection

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

CVE-2010-4298

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

C&PR Studio SQL Injection

================================================================ C&PR Studio Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Voxpopulime CMS SQL Injection

================================================================ Voxpopulime CMS Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

PT-2010-5406

Name of the Vulnerable Software and Affected Versions Free Simple Software version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the downloads id parameter in a "download now" action to "index.php". Recommendations For Free Simple Softwa...

CVE-2010-3911: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via 1 the username aka defaultusername field or 2 the password field in a Users Login action to index.php, or 3 the label parameter in a Settings GetFieldInfo...

CVE-2010-4298: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

PT-2010-5163

Name of the Vulnerable Software and Affected Versions vtiger CRM versions prior to 5.2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML, related to multiple cross-site scripting XSS vulnerabilities. This can be achieved via the username field or the password...

Pecio CMS 'target' Parameter Cross Site Scripting Vulnerability

The host is running Pecio CMS and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbpeciocmsxssvuln.nasl 5794 2017-03-30 13:52:29Z cfi $ pecio cms 'target' Parameter Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Arabian Youtube Script Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Arabian Youtube Script Blind SQL Injection Vulnerability ======================================================== =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The...

CVE-2010-4268

SQL injection vulnerability in the Pulse Infotech Flip Wall comflipwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

PT-2010-5386

Name of the Vulnerable Software and Affected Versions Pulse Infotech Flip Wall com flipwall component version 1.1 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in the "index.php" endpoint...

PT-2010-5390

Name of the Vulnerable Software and Affected Versions Pulse Infotech Sponsor Wall com sponsorwall component version 1.1 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in the "index.php" endpoint...