CVE-2007-5308

The CVE-2007-5308 entry concerns SQL injection in galerie.php of PHP Homepage M (phpHPm) 1.0 when magic_quotes_gpc is disabled. Remote attackers can modify the id parameter in a show action to execute arbitrary SQL commands (impacting confidentiality, integrity, and availability). The NVD entry l...

CVE-2007-5308

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

Unfixed XSS vulnerability at m-pe.tv

Security researcher kusomiso.com, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting m-pe.tv, which at the time of submission ranked 4873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at m-pe.tv

Security researcher kusomiso.com, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting m-pe.tv, which at the time of submission ranked 4873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

PHP Homepage M 1.0 galerie.php Remote SQL Injection Exploit

No description provided by source. ?php if $argv1 == '' echo "--PHP Homepage M V.1.0 galerie.php Exploit----\n"; echo "only with magicquotesgpc OFF\n"; echo "by PHCN Mahjong\n"; echo "Usage : phpHPmv1.php http://127.0.0.1 / 1\n"; echo '----------------------------------------------'; else $host =...

CVE-2007-5308: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

phphome-sql.txt

',30; $user = explode'',$user; $user = strrev$user1; $user = substr$user,4,100; $user = strrev$user; echo "--EXPLOIT FINISHED--\n"; echo "userid : $userid\n"; echo "username: $user\n"; echo "password: $pw\n"; echo '--------------------'; ?...

PHP Homepage M 1.0 - galerie.php SQL Injection

PHP Homepage M 1.0 - galerie.php SQL Injection ',30; $user = explode'',$user; $user = strrev$user1; $user = substr$user,4,100; $user = strrev$user; echo "--EXPLOIT FINISHED--\n"; echo "userid : $userid\n"; echo "username: $user\n"; echo "password: $pw\n"; echo '--------------------'; ? milw0rm.co...

Unfixed XSS vulnerability at www.h-o-m-e-p-a-g-e.info

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.h-o-m-e-p-a-g-e.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is...

Wordpress Multiple Versions Pwnpress Exploitation Tookit (0.2pub)

No description provided by source. !/usr/bin/env ruby .---. .---. : : o : happy antiblogging, dear kids! ..-: 0 : :-.. / .-'' ' ---' ---' " -. Copyright c Lance M. Havok .' " ' " . " . ' " . : '.---.,,.,...,.,.,.,..---. ' ; . " . .' " .' ----- All rights reserved. . '...

wordpress-toolkit-gui.txt

Copyright c 2007 Lance M. Havok . All Rights Reserved. Exploits R' Us: bringing the amazing world of exploitation toys to your mom. Please read http://www.info-pull.com/code/DISCLAIMER for licensing terms. begin require 'pwnpress' require 'rubygems' require 'fox16' include Fox rescue puts "Need...

m-phorum 0.3 - index.php Cross-Site Scripting

m-phorum 0.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25394/info m-phorum is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

m-phorum 0.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25394/info m-phorum is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

joomlaexpose-rfu.txt

HHHHHHH HHHHHH HH HHHHHHHH HHHHHH HHHHHHHH IHHI HH HH HHHHHHHH HH HH HH HH HH HHHHHHHH HH IHHI HH HHH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHHH HHHHHH HH HHHHHHH HHHHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HHH HHHHHHHH HH HH H...

Joomla! Component Expose RC35 - Arbitrary File Upload

HHHHHHH HHHHHH HH HHHHHHHH HHHHHH HHHHHHHH IHHI HH HH HHHHHHHH HH HH HH HH HH HHHHHHHH HH IHHI HH HHH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHHH HHHHHH HH HHHHHHH HHHHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HHH HHHHHHHH HH HH H...

Unfixed XSS vulnerability at www.habervitrini.com

Security researcher M-Ray, has submitted on 06/11/2007 a cross-site-scripting XSS vulnerability affecting www.habervitrini.com, which at the time of submission ranked 12006 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/11/2007. It is...

CVE-2007-2886: Undefined Security Weakness

Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service card hang via unspecified vectors...

CVE-2007-2690: Undefined Security Weakness

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

Unfixed XSS vulnerability at www.hazirslayt.com

Security researcher M-Ray, has submitted on 05/11/2007 a cross-site-scripting XSS vulnerability affecting www.hazirslayt.com, which at the time of submission ranked 4521497 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at istanbul.adreseyemek.com

Security researcher M-Ray, has submitted on 05/11/2007 a cross-site-scripting XSS vulnerability affecting istanbul.adreseyemek.com, which at the time of submission ranked 201068 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...