Directory traversal

Directory traversal vulnerability in Irmin CMS formerly Pepsi CMS 0.6 BETA2 allows remote attackers to read arbitrary files via a .. dot dot in the w parameter to index.php...

CVE-2010-1313: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Seber Cart comsebercart component 1.0.0.12 and 1.0.0.13 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third...

CVE-2010-1309: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Irmin CMS formerly Pepsi CMS 0.6 BETA2 allows remote attackers to read arbitrary files via a .. dot dot in the w parameter to index.php...

CVE-2010-1300

SQL injection vulnerability in index.php in Yamamah aka Dove Photo Album 1.00 allows remote attackers to execute arbitrary SQL commands via the calbums parameter...

Sql injection

SQL injection vulnerability in index.php in Yamamah aka Dove Photo Album 1.00 allows remote attackers to execute arbitrary SQL commands via the calbums parameter...

CVE-2010-1300

The CVE-2010-1300 entry documents a SQL injection in Yamamah (aka Dove Photo Album) 1.00, exploitable via the calbums parameter in index.php. The underlying issue is improper handling of user-supplied input, allowing an attacker to inject arbitrary SQL commands. Impact as described aligns with pa...

CVE-2010-1300

SQL injection vulnerability in index.php in Yamamah aka Dove Photo Album 1.00 allows remote attackers to execute arbitrary SQL commands via the calbums parameter...

CVE-2010-1300: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Yamamah aka Dove Photo Album 1.00 allows remote attackers to execute arbitrary SQL commands via the calbums parameter...

Joomla VJDEO 1.0 Local File Inclusion

o=====================================================================================o Joomla Component VJDEO 1.0 LFI Vulnerability Vendor : http://www.joomla.ternaria.com/ Author : Angela Zhang Contact : [email protected] Date : 07 - April - 2010...

MKPortal lenta module XSS Vulnerability

======================================= MKPortal lenta module XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // // // //...

CVE-2010-1265: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Adam Corley dcsFlashGames comdcsflashgames allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2010-1268: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal sequences in the p parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1266: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 template, 2 menu, 3 events, and 4 SITEROOT parameters to template/babyweb/index.php; the 5 modules and 6 copyright parameters to...

MKPortal whois module XSS Vulnerability

======================================= MKPortal whois module XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // // // //...

JaxCMS 'index.php' Local File Inclusion Vulnerability

JaxCMS is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

INVOhost SQL Injection

Andrés Gómez Exploit Title : INVOhost SQL Injection Date : 2010-04-24 Author : Andrés Gómez Software Link : http://www.invohost.com/ Contact : [email protected] Dork : "Powered by INVOhost" An attacker may execute arbitrary SQL statements on the vulnerable system. This may compromise the...

CVE-2009-4746: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arbitrary web script or HTML via the recordsPerPage parameter in a polldefault login action...

CVE-2009-4742: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via 1 the word parameter in a play help action to the faq module, reachable through index.php; 2 the word parameter in a play keyw action to the link module, reachable through...

SuperNews (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= SuperNews index.php SQL Injection Vulnerability ================================================= SuperNews index.php SQL Injection Vulnerability Author : d4rk-h4ck3r Tunisian Security Team Dor...

CVE-2009-4745: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands via the 1 sortField, 2 sortDesc, or 3 pageNumber parameter in a login action...