CVE-2010-2036: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Percha Fields Attach comperchafieldsattach component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2050: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Moron Solutions MS Comment commscomment component 0.8.0b for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

PHP Graphy 0.9.7 - index.php Remote Command Execution

PHP Graphy 0.9.7 - index.php Remote Command Execution ----------------------oOO------OOo----------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o |...

Telia Web Design (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Telia Web Design index.php SQL Injection Vulnerability ======================================================== Author: CoBRa21 Mail: email protected Script Home: http://www.telia.co.gr/...

PHP Graphy 0.9.7 - 'index.php' Remote Command Execution

----------------------oOO------OOo----------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ------------------------------------------------------------ Remote Command Execution Vulnerability...

Telia Web Design - 'index.php' SQL Injection

------------------------------------------------------------------------------------------- Telia Web Design index.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail: [email protected] Script Home:...

Yupana 0.1rc1 Remote File Inclusion / Local File Inclusion

------------------------------------------------------------------------ yupana-0.1rc1 RFI/LFI vulnerability ------------------------------------------------------------------------ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Sql injection

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1994

TomatoCMS is affected by a SQL injection in the /news/search handler. The vulnerability is triggered via the q parameter (e.g., q=) and creates injectable SQL in conjunction with the PATH_INFO /news/search. Affects TomatoCMS prior to 2.0.5; 2.0.5 fixes the issue, with the vulnerability reappearin...

CVE-2010-1994

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

webYourPhotos 6.05 - index.php Remote File Inclusion

webYourPhotos 6.05 - index.php Remote File Inclusion ----------------------oOO------OOo----------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o |...

yupana-0.1rc1 RFI/LFI vulnerability

Exploit for php platform in category web applications =================================== yupana-0.1rc1 RFI/LFI vulnerability =================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

webYourPhotos 6.05 - 'index.php' Remote File Inclusion

----------------------oOO------OOo----------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ------------------------------------------------------------ Remote File Inclusion Vulnerability...

webYourPhotos <= 6.05 (index.php) Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ===================================================================== webYourPhotos = 6.05 index.php Remote File Inclusion Vulnerability ===================================================================== /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/...

CVE-2010-1994: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1996: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the 1 content parameter in conjunction with a /admin/poll/add PATHINFO, the 2 meta parameter in...

CVE-2010-1995: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges, to inject arbitrary web script or HTML via the 1 title, 2 subTitle, and 3 author parameters in conjunction with a /admin/news/article/add...

CVE-2010-1979

Directory traversal vulnerability in the Affiliate Datafeeds comdatafeeds component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1955

Directory traversal vulnerability in the Deluxe Blog Factory comblogfactory component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1979: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Affiliate Datafeeds comdatafeeds component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...