CVE-2009-4512

Oscailt 3.3 is affected by a directory traversal vulnerability in index.php where, if Use Friendly URL’s is disabled, an attacker can cause local files to be included and executed by supplying a .. in the obj_id parameter. The NVD entry (CVE-2009-4512) describes this as a mixed impact issue with ...

CVE-2009-4523

CVE-2009-4523 is an XSS vulnerability in Zainu 1.0. The issue resides in index.php, vulnerable via the searchSongKeyword parameter in a SearchSong action, allowing remote injection of arbitrary script/HTML. The NVD entry assigns a CVSSv2 base score of 4.3 (medium) with network attack vector, requ...

CVE-2009-4523: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchSongKeyword parameter in a SearchSong action...

CVE-2009-4512: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objid parameter...

CVE-2009-4522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2009-4460

Multiple cross-site scripting XSS vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to 1 index.php, 2 faq.php, and 3 register.php...

CVE-2009-4460

Multiple cross-site scripting XSS vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to 1 index.php, 2 faq.php, and 3 register.php...

CVE-2009-4472: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSconfigdirplugins parameter to plugins/address/admin/index.php, 2 GLOBALSconfigdirfunctions parameter to plugins/im/compose.php, and 3...

Joomla 1.5.x Local File Inclusion

Joomla 1.5.x + Download: http://www.joomla.org/download.html + Bug: Local File inclusion in index.php file + Author: s4r4d0 + Mail: [email protected] + Team: Fatal Error + Poc: http://www.site.com/index.php?option=/../../../../../../../../../../../../etc/passwd%00 + Demo:...

Joomla Calendario Blind SQL Injection

Joomla Component comcalendario Blind SQL injection Vulnerability author : Mr.tro0oqy -- yemeni hacker email : [email protected] dork: inurl:index.php?option=comcalendario exp : http://www.target.com/index.php?option=comcalendario&task=detalhes&Itemid=88&id=297+and+1=1 true...

CVE-2009-4460: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to 1 index.php, 2 faq.php, and 3 register.php...

DBHCMS Web Content Management System 1.1.4 Remote File Inclusion

DBHCMS - Web Content Management System RFI Vulnerability http://www.drbenhur.com/ Author: Gamoscu Site: www.1923turk.biz https://gamoscu.wordpress.com/ Manas58 - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO Hosgeldin medine bebek Allah anali babali buyutsun pasam Exploit: Vuln file...

CVE-2009-4474: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Mike de Boer zoom comzoom component 2.0 for Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

phpbb 2.0.8 index.php 跨站脚本漏洞

No description provided by source...

Sql injection

SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands via the productid parameter in a shop.productdetails shop.flypage action...

Sql injection

SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL commands via the v parameter in a video action...

CVE-2009-4430

CVE-2009-4430 describes an SQL injection in VirtueMart 1.0: index.php handling the shop.product_details action is vulnerable to crafted product_id values, allowing remote SQL commands. The vulnerability affects VirtueMart 1.0 and is supported by NVD data (CVSSv2 base score 7.5, HIGH). Connected s...

CVE-2009-4430

SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands via the productid parameter in a shop.productdetails shop.flypage action...

CVE-2009-4434: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter...

CVE-2009-4425: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter in a browse action...