Cross site scripting

Cross-site scripting XSS vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2009-4552

Cross-site scripting XSS vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2009-4551

SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the campaignid parameter in a results action to index.php...

CVE-2009-4566: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4564: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers to execute arbitrary SQL commands via the category parameter, related to a URI under news/category/...

Cype CMS SQL Injection

Exploit Title: Cype Content Management System Remote SQL Injection Exploit Date: January 1st, 2010 Author: Sora Version: Revision 241 Tested on: Linux Backtrack 3 ----------------------------------------- Cype CMS Remote SQL Injection Exploit Author: Sora Contact: vhr95zw at hotmail dot com...

Joomla Otzivi Blind SQL Injection

Joomla Component comotzivi Blind SQL Injection Vulnerability Author : Cyber945 Home : Ar-ge.Org Greetz : By.Danger,D3xer,LionTurk and All Ar-ge.Org Members Not3 : Ar-ge.Org Online Name : comotzivi Bug Type : Blind SQL Injection Infection : Adminin bilgileri alinabilir. Dork : :...

WordPress 1.5 index.php 跨站脚本攻击漏洞

No description provided by source...

CVE-2009-4561: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-4551: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the campaignid parameter in a results action to index.php...

CVE-2009-4550: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Kunena Forum comkunena component 1.5.3 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the func parameter to index.php...

CVE-2009-4541: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 newticket.php or 2 rempass.php, or a URL in the lang parameter in an adduser action to 3 index.php. NOTE: this can also be...

CVE-2009-4552: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2009-4543: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

Joomla Component com_cartweberp LFI Vulnerability

Exploit for unknown platform in category web applications ================================================= Joomla Component comcartweberp LFI Vulnerability ================================================= @email protected @=Script : Joomla Component comcartweberp @=Author : FL0RiX @=Bug Type :...

Joomla! Component com_cartweberp - Local File Inclusion

@=======================================@ @=Script : Joomla Component comcartweberp @=Author : FL0RiX @=Greez : Deep-Power ,KaCaK,Wretch-x & All Friends @=Bug Type : Local File InlusionLFI @=Dork : inurl:"comcartweberp" @=======================================@ @=Vuln :http://server/ Yol...

Cype CMS - SQL Injection

Cype CMS - SQL Injection Exploit Title: Cype Content Management System Remote SQL Injection Exploit Date: January 1st, 2010 Author: Sora Version: Revision 241 Tested on: Linux Backtrack 3 ----------------------------------------- Cype CMS Remote SQL Injection Exploit Author: Sora Contact: vhr95zw...

Cype CMS - SQL Injection

Exploit Title: Cype Content Management System Remote SQL Injection Exploit Date: January 1st, 2010 Author: Sora Version: Revision 241 Tested on: Linux Backtrack 3 ----------------------------------------- Cype CMS Remote SQL Injection Exploit Author: Sora Contact: vhr95zw at hotmail dot com...

CVE-2009-4512

Oscailt 3.3 is affected by a directory traversal vulnerability in index.php where, if Use Friendly URL’s is disabled, an attacker can cause local files to be included and executed by supplying a .. in the obj_id parameter. The NVD entry (CVE-2009-4512) describes this as a mixed impact issue with ...

CVE-2009-4523

CVE-2009-4523 is an XSS vulnerability in Zainu 1.0. The issue resides in index.php, vulnerable via the searchSongKeyword parameter in a SearchSong action, allowing remote injection of arbitrary script/HTML. The NVD entry assigns a CVSSv2 base score of 4.3 (medium) with network attack vector, requ...