GLinks 2.1 Blind SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + GLinks v2.1 Remote Blind SQL injection + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Str0ke, Neocoderz, Sheiry, Shimik Root aka...

CVE-2009-2437: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 username aka Login and 2 password parameters in a login action...

LionWiki (index.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ LionWiki index.php page Local File Inclusion Vulnerability ============================================================ script home site :0 http://lionwiki.0o.cz/ script name :=...

Sql injection

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355...

CVE-2009-2398: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// dot dot slash slash in the t parameter...

CVE-2009-2390: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the BookFlip combookflip component 2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the bookid parameter to index.php...

CVE-2009-2400: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the PHP comphp component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2009-2393: Undefined Security Weakness

admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors...

CVE-2009-2395: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the K2 comk2 component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php...

CVE-2009-2388: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2379: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-2339

CVE-2009-2339 describes an SQL injection in index.php of Rentventory, exploitable remotely via the product parameter. Root cause: improper input handling allows arbitrary SQL execution. Impact (per CVSS v2): partial confidentiality, integrity, and availability with a base score of 7.5 (NETWORK at...

CVE-2009-2340

CVE-2009-2340 affects Opial 1.0: the admin/index.php module is vulnerable to SQL injection via the txtUserName (User Name) parameter, enabling remote execution of arbitrary SQL commands. Some sources also mention txtPassword and other parameters, but the core detail is the improper input filterin...

CVE-2009-2339

SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via the product parameter...

CVE-2008-6848

CVE-2008-6848 affects phpGreetCards 3.7, specifically the code path in index.php. The vulnerability is an XSS via the category parameter in a select action, allowing remote attackers to inject arbitrary web script or HTML. The connected documents confirm the affected component and the underlying ...

CVE-2008-6853: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute arbitrary SQL commands via the PollID parameter...

CVE-2009-2340: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtUserName aka User Name parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6852: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Ice Gallery comice component 0.5 beta 2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2008-6848: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary web script or HTML via the category parameter in a select action...

CVE-2008-6849: Improper Control of Generation of Code

Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a via a link that is listed by userfiles/numbershell.php...