13714 matches found
CVE-2009-1519: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a .. dot dot in the language parameter...
Sql injection
SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter...
CVE-2009-1499
The CVE-2009-1499 entry describes an SQL injection in the Joomla! MailTo (com_mailto) component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php, indicating a remote‑code capable injection affecting the application’s database quer...
CVE-2008-6787: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user...
CVE-2009-1500: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter...
ProjectCMS 1.0b (index.php sn) Remote SQL Injection Vulnerability
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...
Directory traversal
Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to index.php...
CVE-2009-1480
Pragyan CMS 2.6.4 is affected by a SQL injection in index.php. The vulnerability is triggered via the fileget parameter in a view action and other vectors, enabling remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the documents, and there is no remediat...
CVE-2009-1480: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via the fileget parameter in a view action and other unspecified vectors...
CVE-2009-1458: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the slab parameter in an edit action, 2 the catname parameter in a showcats action, and 3 the cat parameter in a reordercat action...
Thickbox Gallery v2 (index.php ln) Local File Inclusion Vulnerability
No description provided by source. + Thickbox Gallery v2 Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Local File Inclusion PoC : http://127.0.0.1/path/index.php?ln=../../../../../../BOOTSECT.BAK%00...
CVE-2009-1445
Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to 1 read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and 2 include and execute arbitrary local files via directory traversal sequences in the...
Opencart 1.1.8 (route) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================= Opencart 1.1.8 route Local File Inclusion Vulnerability ========================================================= +=================================================================+...
Thickbox Gallery v2 (index.php ln) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Thickbox Gallery v2 index.php ln Local File Inclusion Vulnerability ===================================================================== + Thickbox Gallery v2 Local Fil...
Opencart 1.1.8 Local File Inclusion
+=================================================================+ xTitle : Opencart Lfi Injection Vulnerability xSoftware : OpenCart opencartv1.1.8 xVendor : http://www.opencart.com/ xDate : 25 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog : http://oonboy.blogspot.co...
CVE-2009-1405
CVE-2009-1405 : Affected software is PastelCMS 0.8.0. The vulnerability is a directory traversal in index.php allowing remote inclusion/execution of local files via a ".." in the set_lng parameter when magic_quotes_gpc is disabled. This is the core impact described in the connected documents. The...
CVE-2009-1405: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the setlng parameter...
CVE-2008-6751: Improper Input Validation
Unrestricted file upload vulnerability in index.php in the Twitter Clone TClone plugin for ReVou Micro Blogging allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in settings/myphoto...
CVE-2009-1410: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...