Uiga Church Portal - 'year' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php view Uiga Church Portal http://www.scriptdevelopers.net/products/ucp.html AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...

CVE-2008-7098: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the 1 Title and 2 Text fields; 3 the gallery, possibly the Description field in Your Pictures; 4 the forum, possibly the Your Message fiel...

Moa Gallery 1.2.0 (index.php action) SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php action Moa Gallery 1.2.0 www.moagallery.net AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...

Sql injection

Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in the viewpage action to the default URI, probably index.php, or 2 divid parameter in the schedule action to index.php...

CVE-2008-7085

Affected software: TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced. Vulnerability: Multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands. Entry points / parameters: (1) id parameter in the viewpage action (likely index.php) and (2) divid parameter in t...

Moa Gallery 1.2.0 - index.php?action SQL Injection

Moa Gallery 1.2.0 - index.php?action SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php action Moa Gallery 1.2.0 www.moagallery.net AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...

Moa Gallery 1.2.0 (index.php action) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Moa Gallery 1.2.0 index.php action SQL Injection Vulnerability ================================================================ Remote SQL Injection Vulnerability index.php...

SearchFeed Script Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || SearchFeed Script Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.jce-tech.com/searchfeed.php Greetings :...

CVE-2008-7072

Cross-site scripting XSS vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the start parameter...

CVE-2008-7072

CVE-2008-7072 is an XSS vulnerability in Chipmunk Topsites, affecting index.php via the start parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The description and connected records specify the vulnerable component as Chipmunk Topsites’ index.php and the start p...

CVE-2008-7072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the start parameter...

CVE-2008-7062: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/...

Sql injection

SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...

CVE-2008-7059

CVE-2008-7059 describes an SQL injection vulnerability in the index.php of One-News Beta 2, exploitable via the q parameter. This allows remote attackers to execute arbitrary SQL commands. The issue is classified with a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, and no ...

CVE-2008-7033: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Simple Shop Galore comsimpleshop component for Joomla! allows remote attackers to execute arbitrary SQL commands via the section parameter in a section action to index.php, a different vulnerability than CVE-2008-2568. NOTE: this issue was disclosed by an...

CVE-2008-7060: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the 1 title or 2 content parameters in a news item to add.php, and the 3 itemnum, 4 author, or 5 comment parameters in a comment to index.php. NOTE: vectors 1 an...

CVE-2008-7059: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...

CVE-2008-7036: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 direction and 2 orderby parameters...

CVE-2009-2929

Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via the 1 tgslanguageid, 2 tpldir, 3 referer, 4 user-agent, 5 site, 6 option, 7 dboptimization, 8 owner, 9 adminemail, 10 defaultlanguage, and 11 dbhost parameters to...

CVE-2009-2929

CVE-2009-2929 affects TGS Content Management 0.x. The vulnerability is multiple SQL injection points in cms/index.php (parameters including tgs_language_id, tpl_dir, referer, user-agent, site, option, db_optimization, owner, admin_email, default_language, db_host) and cms/frontpage_ception.php (p...