CVE-2010-2143

CVE-2010-2143 : Symphony CMS is vulnerable to a directory traversal in the index.php file’s mode parameter, allowing remote attackers to read arbitrary files and potentially impact the server. Affected: Symphony CMS 2.0.7 (and references to 2.0.6), with root cause described as unsanitized input d...

CVE-2010-2143

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

CVE-2010-2147: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the My Car commycar component 1.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the modveh parameter to index.php...

帝国（EmpireCMS）6.0 /search/keyword/index.php 存在多个跨站漏洞

帝国软件是一家专注于网络软件开发的科技公司，其主营产品“帝国网站管理系统EmpireCMS”是目前国内应用最广泛的CMS程序。通过多年的不断创新与完善，使系统集安全、强大、稳定、灵活于一身。 目前EmpireCMS程序已经广泛应用在国内数十万家网站，覆盖国内上千万上网人群，并经过上千家知名网站的严格检测，被称为国内最稳定的CMS系统。 /search/keyword/index.php 存在多个跨站漏洞 http://ssvdb.com/search/keyword/index.php?show=3"xss...

CVE-2010-2143: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

CVE-2010-2141: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action...

CVE-2010-2136: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/index.php in Article Friendly, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

Delivering Digital Media CMS SQL Injection

Title: Delivering Digital Media CMS SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A N.A.S.T ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Delivering Digital Media CMS SQL Injection Vulnerability ! Author ...

CVE-2010-2126: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Snipe Gallery 3.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the cfgadminpath parameter to 1 index.php, 2 view.php, 3 image.php, 4 search.php, 5 admin/index.php, 6 admin/gallery/index.php, 7 admin/gallery/view.php, 8...

CVE-2010-2128: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JE Quotation Form comjequoteform component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the view parameter to index.php...

OCS Inventory NG Multiple SQL Injection Vulnerabilities

This host is running OCS Inventory NG and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodocsinventoryngmultsqlinjvulnmay10.nasl 5394 2017-02-22 09:22:42Z teissa $ OCS Inventory NG Multiple SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

CVE-2010-2122: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the SimpleDownload comsimpledownload component before 0.9.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

Cosmos Solutions CMS - 'id=' / 'page=' SQL Injection

Cosmos Solutions cms SQL Injection Vulnerability Vendor:http://www.cosmossolutions.net/ Discovered by : gendenk Site : http://jatimcrew.org Dork : "Webdesign Cosmos Solutions" Exploit : site/pinf.php?page=SQL Injection Exploit : site/index.php?id=SQL Injection Demo:...

Joomla Component com_bfquiztrial SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Component combfquiztrial SQL Injection Vulnerability ============================================================ :::::::::::::::::::::::::::::::::::::: 0x1...

Unfixed XSS vulnerability at www.dup3.me

Security researcher internet, has submitted on 28/05/2010 a cross-site-scripting XSS vulnerability affecting www.dup3.me, which at the time of submission ranked 417759 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2010. It is currently...

Joomla Reservations Cross Site Scripting

Exploit Title: Joomla Component Reservations XSS Vulnerability Date: 28th May 2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla...

Joomla Component com_reservations XSS Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Component Reservations XSS Vulnerability =============================================== :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Informati...

CVE-2010-2096

Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CVE-2010-2096

CVE-2010-2096 is a directory traversal vulnerability in CMSQlite

CVE-2010-2095: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter...