phpMySite (XSS/SQLi) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== phpMySite XSS/SQLi Multiple Remote Vulnerabilities ==================================================== ================================================================= phpMySite XSS/SQ...

CVE-2010-0757: Undefined Security Weakness

Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension using the uploadform action, then accessing it via a direct request to the file in...

Jamit Job Board v.3.0 Cross Scripting Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Jamit Job Board v.3.0 Cross Scripting Vulnerabilities ===================================================== Jamit Job Board v.3.0 Cross Scripting Vulnerabilities + Exploit Title: Jamit...

Gravity Board X 2.0 Beta (Public Release 3) - SQL Injection

Gravity Board X 2.0 Beta Public Release 3 - SQL Injection !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit co...

CVE-2010-0754: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the which parameter in a copy action...

phpMySite - Cross-Site Scripting / SQL Injection

================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software Link: http://www.phpmysite.com/ Version: N/A...

Joomla JoomlaConnect_be SQL Injection

!/usr/bin/php » Greetz to: Spécial His0k4 Tous les hackers Algérie » Dork: inurl:index.php?option=comjoomlaconnectbe Joomla comjoomlaconnectbe id Blind SQL Injection Exploit x Usage: joomla.php "http://url/index.php?option=comjoomlaconnectbe&Itemid=53&task=showBizPage&id=3 '; if $argc 1 $url =...

JavaPont Local File Inclusion

JavaPont SQL Injection LFI Vulnerability Author : Palyo34 Homepage : http://www.1923turk.com Vulnerable File index.php?module=search&q= XpL XpL ../../../../../../../../../../../../../../../etc/passwd%00 Demo...

LiveChatNow SQL Injection

Title: SQL injection vulnerability in LiveChatNow Date: 20.02.2010 Author: Ariko-Security Software Link: http://www.livechatnow.com/ Version: ALL Tested on: freebsd / ubuntu ============ Ariko-Security - Advisory 4/2/2010 ============= SQL injection vulnerability in LiveChatNow Vendor's Descripti...

GameScript 3.0 - SQL Injection

Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection Dork: Copyright © 2005 - 2006 GameScript.net. All Games Copyright © To Their Respective Owners. All Rights Reserved. Exploit:...

CVE-2010-0709: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Limny 2.0 allow remote attackers to 1 hijack the authentication of users or administrators for requests that change the email address or password via the user action to index.php, and 2 hijack the authentication of the administrator for...

Sql injection

SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action...

CVE-2010-0692: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the IP-Tech JQuarks comjquarks Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-0699: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-0700: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2010-0690: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action...

CVE-2010-0695: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via the navid parameter...

Sql injection

SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter...

Directory traversal

Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2010-0677

CVE-2010-0677 affects the PHP-based system component “index.php” in the Katalog Stron Hurricane version 1.3.5 (and possibly earlier). The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands through the HTTP GET parameter, enabling potential data disclos...