CVE-2008-2225: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId parameter...

gamecms-sql.txt

w w w || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

gameCMS Lite 1.0 (index.php systemId) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= gameCMS Lite 1.0 index.php systemId SQL Injection Vulnerability ================================================================= w w w || || | || o,7 || . o7 || 4||| ow, : ...

gameCMS Lite 1.0 (index.php systemId) SQL Injection Vulnerability

No description provided by source. w w w || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ ...

GameCMS Lite 1.0 - systemId SQL Injection

GameCMS Lite 1.0 - systemId SQL Injection w w w || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | |...

GameCMS Lite 1.0 - 'systemId' SQL Injection

w w w || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-...

Directory traversal

Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the style parameter...

CVE-2008-2076

The CVE-2008-2076 entry concerns ActualAnalyzer Lite 2.78 from ActualScripts. Affected component: admin.php; vulnerability type: Local File Inclusion via the style parameter. Root cause: inadequate sanitization allows a “..” path traversal to include arbitrary local PHP files, enabling remote att...

CVE-2008-2076: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the style parameter...

ActualAnalyzer Lite (free) 2.78 Local File Inclusion Vulnerability

No description provided by source. ActualAnalyzer Lite free 2.78 LOCAL FILE INCLUSION AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi -...

aal-lfi.txt

ActualAnalyzer Lite free 2.78 LOCAL FILE INCLUSION AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr Scrip...

ActualAnalyzer Lite (free) 2.78 - Local File Inclusion

ActualAnalyzer Lite free 2.78 - Local File Inclusion ActualAnalyzer Lite free 2.78 LOCAL FILE INCLUSION AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani -...

ActualAnalyzer Lite (free) 2.78 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== ActualAnalyzer Lite free 2.78 Local File Inclusion Vulnerability ================================================================== ActualAnalyzer Lite free 2.78 LOCAL FILE...

ActualAnalyzer Lite (free) 2.78 - Local File Inclusion

ActualAnalyzer Lite free 2.78 LOCAL FILE INCLUSION AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr Scrip...

Directory traversal

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite aka gallery-script-lite or Free Photo Gallery Site Script, as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter...

CVE-2008-1730

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite aka gallery-script-lite or Free Photo Gallery Site Script, as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter...

CVE-2008-1730

ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script) is affected by CVE-2008-1730 due to a directory traversal in download.html where the path parameter is not properly validated, allowing remote attackers to read arbitrary local files. The vulnerability is d...

CVE-2008-1730

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite aka gallery-script-lite or Free Photo Gallery Site Script, as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter...

CVE-2008-1730: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite aka gallery-script-lite or Free Photo Gallery Site Script, as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...