13714 matches found
CVE-2008-5217
Vulnerability context (CVE-2008-5217) : A directory traversal flaw affects the PHP-based CMS txtCMS 0.3 in index.php when PHP is configured with register_globals enabled and magic_quotes_gpc disabled. An attacker can manipulate the id parameter with a .. sequence to cause local file inclusion and...
CVE-2008-5217: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in txtCMS 0.3, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter...
Sql injection
SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter...
CVE-2008-5190
SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter...
CVE-2008-5190
SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter...
CVE-2008-5190
The vulnerability CVE-2008-5190 is an SQL injection in the web application eSHOP100, occurring in index.php via the SUB parameter. This allows remote attackers to execute arbitrary SQL commands, potentially impacting confidentiality, integrity, and availability as described by the CVSS metric (ba...
CVE-2008-5201: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in OTManager CMS 24a allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conteudo parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp,...
CVE-2008-5195: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in SebracCMS sbcms 0.4 allow remote attackers to execute arbitrary SQL commands via 1 the recid parameter to cms/form/read.php, 2 the uname parameter to cms/index.php, and other unspecified vectors...
CVE-2008-5202: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in OTManager CMS 24a allows remote attackers to inject arbitrary web script or HTML via the conteudo parameter...
CVE-2008-5200: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Xe webtv comxewebtv component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...
CVE-2008-5190: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter...
CVE-2008-5171: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 DB, 2 lang, and 3 skin parameters...
CVE-2008-5165: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to 1 index.php, 2 open.php, 3 openraw.php, and 4 newticket.php...
CVE-2008-5131
Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via 1 the aid parameter to articledetails.php, and the 2 username and 3 password to the admin panel admin/index.php...
ultrastats-sql.txt
||| ||| ||| ||| ||| |||| ||| |||||||||||| +++++++++++ ++++++++++++ ++++++++++++ | ++++++++++++| | ++++++++ | | ++ | |+| Ultrastats exploit by eeee eeee e e -------------------- 8 8 8 8 8eee 8eee 8eee8e 88 88 88 8 88ee 88ee 88 8 --- mail: [email protected] - Greetz to:...
Ultrastats 0.2.144/0.3.11 (index.php serverid) SQL Injection Vulnerability
No description provided by source. ||| ||| ||| ||| ||| |||| ||| |||||||||||| +++++++++++ ++++++++++++ ++++++++++++ | ++++++++++++| | ++++++++ | | ++ | |+| Ultrastats exploit by eeee eeee e e -------------------- 8 8 8 8 8eee 8eee 8eee8e 88 88 88 8 88ee 88ee 88 8 --- mail: [email protected]...
Ultrastats 0.2.144/0.3.11 (index.php serverid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================================== Ultrastats 0.2.144/0.3.11 index.php serverid SQL Injection Vulnerability ========================================================================== ||| ||| ||| |||...
Ultrastats 0.2.144/0.3.11 - 'serverid' SQL Injection
||| ||| ||| ||| ||| |||| ||| |||||||||||| +++++++++++ ++++++++++++ ++++++++++++ | ++++++++++++| | ++++++++ | | ++ | |+| Ultrastats exploit by eeee eeee e e -------------------- 8 8 8 8 8eee 8eee 8eee8e 88 88 88 8 88ee 88ee 88 8 --- mail: [email protected]...