1451 matches found
CVE-2008-6503
CVE-2008-6503 describes multiple XSS vulnerabilities in PrestaShop 1.1.0.3, exploitable via PATH_INFO to (1) admin/login.php and (2) order.php. The vulnerability is a client-side script injection risk, allowing remote attackers to inject arbitrary web script or HTML as described in NVD. Base scor...
Sql injection
Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
CVE-2009-1026
CVE-2009-1026 affects Kim Websites 1.0, with SQL injection vulnerabilities in login.php. The issue allows remote attackers to manipulate the database by supplying crafted values for the username or password fields, enabling arbitrary SQL execution. This aligns with the NVD assessment of a high-se...
CVE-2008-6484
SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...
CVE-2008-6484
SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...
Kim Websites 1.0 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. Kim Websites 1.0 SQL Injection Vulnerability Authentication bypass Virangar Security Team www.virangar.net -------- Discoverd By : Virangar Security Teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & Ariasecurity team &...
CVE-2008-6465
Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...
CVE-2008-6465
Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...
CVE-2008-6465
CVE-2008-6465 affects Parallels H-Sphere 3.0.0 P9 and 3.1 P1. The NUCLEI template documents multiple cross-site scripting (XSS) flaws in login.php within webshell4, allowing an attacker to inject arbitrary script/HTML via the parameters (err, errorcode, login). Potential impact includes theft of ...
Kim Websites 1.0 - Authentication Bypass
Kim Websites 1.0 SQL Injection Vulnerability Authentication bypass Virangar Security Team www.virangar.net -------- Discoverd By : Virangar Security Teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & Ariasecurity team & all hackerz greetz:to my best frien...
Kim Websites 1.0 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== Kim Websites 1.0 Auth Bypass SQL Injection Vulnerability ==========================================================...
CVE-2009-0886
Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the defaultlanguage parameter...
OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion
OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZer...
OneOrZero Helpdesk 1.6.5.7 Local File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZero Helpdesk and Task Management System is a powerfu...
OneOrZero Helpdesk <= 1.6.5.7 Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZero Helpdesk and...
celerbb 0.0.2 - Multiple Vulnerabilities
Salvatore "drosophila" Fresta + Application: CelerBB + Version: 0.0.2 + Website: http://celerbb.sourceforge.net/ + Bugs: A Multiple SQL Injection B Information Disclosure C Authenticaion Bypass + Exploitation: Remote + Date: 05 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author:...
Sql injection
SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter...
CVE-2009-0810
The vulnerability CVE-2009-0810 affects xGuestbook 2.0, specifically the login.php component where the user parameter is used in a way that permits SQL injection. The advisory states that remote attackers can cause arbitrary SQL commands to execute, indicating a classic injection in authenticatio...