CVE-2010-0672

SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter...

CVE-2010-0672

Affected software: WSN Guest 1.02. The entry CVE-2010-0672 describes an SQL injection in index.php where the orderlinks parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is caused by unsafely handling user-supplied input in a web application component, enablin...

CVE-2010-0675

CVE-2010-0675 affects BGSvetionik BGS CMS 2.2.1. The vulnerability is a Cross-site Scripting (XSS) in index.php that allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. Root cause is insufficient sanitization/validation of the search paramet...

CVE-2010-0671

Summary of CVE-2010-0671 (normal mode): The vulnerability affects the KR MEDIA Pogodny CMS, specifically in the index.php handling of the niusy action. The root cause is improper handling of the id parameter, leading to an SQL injection that allows remote attackers to execute arbitrary SQL comman...

CVE-2010-0675: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. NOTE: some of these details are obtained from third party information...

CVE-2010-0676: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in the RWCards comrwcards component 3.0.18 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter...

CVE-2010-0671: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a niusy action...

CVE-2010-0680: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2010-0672: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter...

CVE-2010-0677: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter...

CubeCart (index.php) SQL Injection Vulnerability

No description provided by source. CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:...

CubeCart - index.php SQL Injection

CubeCart - index.php SQL Injection CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:...

CubeCart - 'index.php' SQL Injection

CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:. Dork : "powered by CubeCart"...

Mambo Component com_acnews [id] SQL Injection Vulnerability

No description provided by source. Author: Zero Bits & Xzit3 Team: Ro0T-MaFia Member's: Zero Bits, CMD, Jeferx, Xzit3, XP3RM4 & Jeferx Date: 15/02/2010 Contact: [email protected] - [email protected] Country: Venezuela - Mexico Vulnerability's: + SQL Injection: Error: You have an error...

Joomla com_flashmagazinedeluxe Remote Blind Sql Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Joomla comflashmagazinedeluxe Remote Blind Sql Injection Vulnerability ======================================================================= !/usr/bin/php 1 $url =...

Mambo Component 'com_acnews' - 'id' SQL Injection

Mambo Component comacnews id | SQL Injection Author: Zero Bits & Xzit3 Team: Ro0T-MaFia Member's: Zero Bits, CMD, Jeferx, Xzit3, XP3RM4 & Jeferx Date: 15/02/2010 Contact: [email protected] - [email protected] Country: Venezuela - Mexico Vulnerability's: + SQL Injection: Error: You hav...

WSN Guest 1.02 - orderlinks SQL Injection

WSN Guest 1.02 - orderlinks SQL Injection Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : WSN Guest 1.02 Download : http://scripts.webmastersite.net/wsnguest/wsnguest.zip Exploat :index.php?page=20&orderlinks=SQL...

WSN Guest 1.02 (orderlinks) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= WSN Guest 1.02 orderlinks SQL Injection Vulnerability ======================================================= Author : Gamoscu Homepage : http://www.1923turk.com Blog :...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the pluginid parameter is 4, allow remote attackers to execute arbitrary SQL commands via the 1 users username and 2 passwords parameters...

CVE-2010-0632: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Parkview Consultants SimpleFAQ comsimplefaq component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action to index.php...