Joomla Flash Fun Local File Inclusion

========================================================= Joomla Component comjoomlaflashfun LFI Vulnerability ========================================================= +Title : Joomla Component comjoomlaflashfun LFI Vulnerability +Author : josalijoe +Contact : [email protected] +Home :...

Stadtaus Voting 1.9.1 Remote File Inclusion

Dr4cula.Us Stadtaus Voting v1.9.1 Remote File Include Vulnerability Download Script : http://scripti.org/scriptstadtaus-anket-scripti19016.html Author : Dracula Contact : [email protected] Location : Türkiye Blog : http://dr4cula.us Dork : Stadtaus voting File : index.php include $scriptroot...

Stadtaus Voting v1.9.1 Remote File Include Vulnerability

Exploit for php platform in category web applications ======================================================== Stadtaus Voting v1.9.1 Remote File Include Vulnerability ======================================================== Dr4cula.Us Stadtaus Voting v1.9.1 Remote File Include Vulnerability...

Joomla Basdv Local File Inclusion / Directory Traversal

combsadv Directory Traversal Vulnerability Author : Fl0riX | Bug Researchers ! Greetz: Sakkure And All My Friends ! ScriptName: Joomla combsadv ! Demo :http://www.simons5.com/portal/ ! Example; /index.php?option=combsadv&controller=../../../../../../../../etc/passwd%00...

PT-2010-4723

Name of the Vulnerable Software and Affected Versions Free Simple CMS versions 1.0 and earlier Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the body, footer, header, menu left, or menu right parameter. This can be achieved by exploiting remote file...

CuteNews - page Local File Inclusion

CuteNews - page Local File Inclusion ========================================================== CuteNews page local File Inclusion Vulnerability ========================================================== vendor: http://cutephp.com/ Author: eidelweiss Contact: eidelweiss at windowslive dot com...

CVE-2010-3307: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 body, 2 footer, 3 header, 4 menuleft, or 5 menuright parameter...

PT-2010-5036

Name of the Vulnerable Software and Affected Versions Free Simple CMS version 1.0 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the meta or phpincdir parameter in the themes/default/index.php file. Recommendations For Free Simple CMS version 1.0, conside...

CVE-2010-3742: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 meta or 2 phpincdir parameter, a different issue than CVE-2010-3307...

CuteNews - 'page' Local File Inclusion

========================================================== CuteNews page local File Inclusion Vulnerability ========================================================== vendor: http://cutephp.com/ Author: eidelweiss Contact: eidelweiss at windowslive dot com...

Display event CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= Display event CMS SQL Injection Vulnerability ============================================= + Auth0r : Game Over + E-m41L : gameover20atlivedotcom + D0rk : inurl:index.php?action=cms.display + S-Si...

CuteNews Local File Inclusion

========================================================== CuteNews page local File Inclusion Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ ...

Zen Cart 1.3.9f Local File Inclusion

Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML components. Support is provided for...

phpMyFAQ 2.6.x index.php跨站脚本漏洞

BUGTRAQ ID: 43560 phpMyFAQ是一款多语言、基于数据库的FAQ系统。 phpMyFAQ没有正确地过滤提交给index.php页面的请求参数便返回给了用户。远程攻击者可以通过提交恶意的URL请求向页面输出注入JavaScript代码，导致窃取域Cookie。 phpMyFAQ 2.6.x 厂商补丁： phpMyFAQ -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phpmyfaq.de/ http://www.example.com/index.php/"scriptalert"XSS"/script...

PHPMyFAQ 2.6.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43560/info phpMyFAQ is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

CVE-2010-3607

Cross-site scripting XSS vulnerability in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...

Sql injection

SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands via the img parameter...

CVE-2010-3601

SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands via the img parameter...

CVE-2010-3601

The CVE-2010-3601 entry describes a SQL injection in ibPhotohost 1.1.2, triggered via the img parameter in index.php. This affects the web application by allowing remote attackers to execute arbitrary SQL commands. CVSS data indicates a Network-based, Low-Complexity, No-Auth vulnerability with a ...

CVE-2010-3606

CVE-2010-3606 : In NetArt MEDIA Real Estate Portal 2.0, the file AGENTS/index.php is affected by directory traversal in the folder and action parameters, enabling remote attackers to include and execute arbitrary local files. The NVD description confirms the vulnerability and impact with a CVSS v...