SIPS v0.2.2 Remote File Inclusion Vulnerability

/=============================================================================================================================================== | | o SIPS v0.2.2 Remote File Inclusion Vulnerability | | Software : SIPS v0.2.2 | Vendor : http://www.phpscripts-fr.net/scripts/hosted/sips022.zip |...

CVE-2009-2263: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathnam...

PHP-Sugar 0.80 (index.php t) Local File Inclusion Vulnerability

No description provided by source. =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=- script: PHP-Sugar 0.80 ----------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://php-sugar.net/files/?mod=files...

PHP-Sugar 0.80 (index.php t) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP-Sugar 0.80 index.php t Local File Inclusion Vulnerability =============================================================== =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=...

PHP-Sugar 0.80 - index.php?t Local File Inclusion

PHP-Sugar 0.80 - index.php?t Local File Inclusion =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=- script: PHP-Sugar 0.80 ----------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://php-sugar.net/files/?mod=files...

CVE-2008-6839

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

CVE-2008-6839

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

Mega File Manager 1.0 (index.php page) LFI Vulnerability

Exploit for unknown platform in category web applications ======================================================== Mega File Manager 1.0 index.php page LFI Vulnerability ======================================================== + Mega File Manager 1.0 index.php page Local File Inclusion...

CVE-2009-2180: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via 1 a .. dot dot or 2 absolute path in the file parameter...

CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

Sql injection

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2151

Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. dot dot in the newlang parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2009-2153: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2009-2151: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. dot dot in the newlang parameter...

CVE-2009-2164: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

CVE-2009-2148: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2133: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrary web script or HTML via the 1 menu or 2 sort parameter to pivot/index.php, 3 the value of a check array parameter in a delete action to pivot/index.php, 4 the element name in a...

CVE-2009-2110: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...

CVE-2009-2100

Directory traversal vulnerability in the JoomlaPraise Projectfork comprojectfork component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php...