Directory traversal

Directory traversal vulnerability in the PicSell compicsell component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the dflink parameter in a prevsell dwnfree action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in ajax.php in Wiccle Web Builder WWB 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the posttext parameter in a site customsearch action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-3212: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via the frmQuestion parameter in a retrieve action, in conjunction with a user/password PATHINFO...

CVE-2010-3205: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

Global Event Source (index.php) Blind Sql Injection Vulnerability

Exploit for php platform in category web applications ================================================================= Global Event Source index.php Blind Sql Injection Vulnerability ================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected ....

CVE-2010-3207: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the albumid parameter. NOTE: some of these details are obtained from third party information...

PHP Joke Site Software - sbjoke_id SQL Injection

PHP Joke Site Software - sbjokeid SQL Injection Title: PHP Joke Site Software sbjokeid SQL Injection Vuln Link: http://www.softbizscripts.com/jokes-script-features.php Author: BorN To K!LL - h4ck3r 3xploit:...

Web-Ideas Web Shop Standard - SQL Injection

Exploit Title: SQL injection in web-ideas web shop standard Date: 31.08.2010 Author: Ariko-Security Software Link: http://www.web-ideas.com.au/web-shopstandard Version: ALL Tested on: ALL CVE : n/a Ariko-Security: Security Audits , Audyt bezpieczeństwa Advisory: 728/2010 ============ Ariko-Securi...

GaleriaSHQIP 1.0 SQL Injection

Exploit Title: GaleriaSHQIP SQL Injection Vulnerability Date: 28.08.2010 Author: Valentin Category: webapps/0day Version: v1.0 full Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = GaleriaSHQIP S...

Seagull v0.6.7 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== Seagull v0.6.7 SQL Injection Vulnerability ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

Textpattern RFI Vulnerability

Exploit for php platform in category web applications ============================= Textpattern RFI Vulnerability ============================= Textpattern index.php -------------------------------------------------------------- + Author : Sn!pEr.S!Te Hacker + Email : email protected + Inj3ct0r...

textpattern CMS 4.2.0 - Remote File Inclusion

textpattern CMS 4.2.0 - Remote File Inclusion Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Textpattern index.php -------------------------------------------------------------- + Author : Sn!pEr.S!Te Hacker + Email :...

CVE-2009-4989

The CVE-2009-4989 entry concerns an XSS vulnerability in AJ Auction Pro OOPD 3.0, specifically in index.php where the txtkeyword parameter in a search action can be exploited to Inject arbitrary web-script/HTML. Affected component: index.php of AJ Auction Pro OOPD 3.0. Underlying cause: cross-sit...

CVE-2009-4977: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arbitrary PHP code via a URL in the maincontent parameter...

CVE-2009-4986: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the env parameter...

CVE-2009-4989: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbitrary web script or HTML via the txtkeyword parameter in a search action...

Gazelle CMS - Multiple Vulnerabilities

Gazelle CMS - Multiple Vulnerabilities Exploit Title: AnantaGazelle Local File inclusion / Xss Vulnerabilities Date: 23/08/2010 Author: Sweet Contact : [email protected] Software Link: www.anantasoft.com Download:http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Version: AnantaGazelle1...

Flex-Com (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Flex-Com index.php Blind SQL Injection Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /...

Free Simple Software 1.0 - Remote File Inclusion

Free Simple Software 1.0 - Remote File Inclusion Free Simple Software V1.0 By : Dr.$audi SauDi ViRuS TeaM By : http://Sa-ViRuS.CoM Email : [email protected] Dork: Powered by free simple software Greets : RENO , Dr.php , ! BaD BoY ! , Gov.HaCkEr , Mind , AnTi SeCuRe Script HomePage:...

MailForm 1.2 Remote File Inclusion

Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://scripts.bdr130.net/files/any/MailForm.zip Version: v 1.2 Tested on: Windows XP CVE : هكر المسيب Contact: LoSt.HaCkEratyahoodotcom /0r/ [email protected]...