Arbitrary File Read

github.com/grafana/grafana is vulnerable to arbitrary file read. Lack of proper handling of MySQL data source connection string allows an authenticated user having privilege to modify the configuration to read arbitrary files...

Code injection

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php part of the installation process allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled...

EQdkp <= 1.3.1 (Referer Spoof) Remote Database Backup Vulnerability

No description provided by source. Title: EQdkp = 1.3.1 Referer Spoof to access to SQL Database URL: http://www.eqdkp.com Hook: Powered by EQdkp Author: Eight10 Contact: [email protected] --------------------------------------------------------------------------------------------------------...

PHP Visit Counter <= 0.4 (datespan) SQL Injection Vulnerability

No description provided by source. PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:read.php?datespan= Vulnerability: 1. SQL Injection 1.1...

Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-671-1

Ubuntu Update for Linux kernel vulnerabilities USN-671-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6711.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-671-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

PHP Visit Counter 0.4 - datespan SQL Injection

PHP Visit Counter 0.4 - datespan SQL Injection PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:"read.php?datespan=" Vulnerability: 1. SQL...

PHP Visit Counter 0.4 - 'datespan' SQL Injection

PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:"read.php?datespan=" Vulnerability: 1. SQL Injection 1.1...

Code injection

inc/filebrowser/browser.php in deV!Lz Clanportal DZCP 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter...

CVE-2007-1167

inc/filebrowser/browser.php in deV!Lz Clanportal DZCP 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter...

EUVD-2007-1164

inc/filebrowser/browser.php in deV!Lz Clanportal DZCP 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter...

CVE-2007-1167

CVE-2007-1167 affects deV!L`z Clanportal (DZCP) prior to or including 1.4.5. The issue resides in inc/filebrowser/browser.php, where an attacker can trigger information disclosure by using the inc/mysql.php value of the file parameter, allowing remote retrieval of MySQL data. This is a remote, un...

CVE-2007-1167

inc/filebrowser/browser.php in deV!Lz Clanportal DZCP 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter...

CVE-2007-1167: Exposure of Sensitive Information to an Unauthorized Actor

inc/filebrowser/browser.php in deV!Lz Clanportal DZCP 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter...

DZCP (deV!L_z Clanportal) 1.4.5 - Remote File Disclosure

DZCP deV!Lz Clanportal 1.4.5 - Remote File Disclosure DZCP Devilz Clanportal = 1.4.5 Mysql Data viewable Found by: Kiba Solution: Install security Fix! Exploit: http://SITE/PATH/inc/filebrowser/browser.php?file=inc/mysql.php Example:...

DZCP (deV!L_z Clanportal) 1.4.5 - Remote File Disclosure

DZCP Devilz Clanportal = 1.4.5 Mysql Data viewable Found by: Kiba Solution: Install security Fix! Exploit: http://SITE/PATH/inc/filebrowser/browser.php?file=inc/mysql.php Example: http://www.example.com/dzcp/inc/filebrowser/browser.php?file=inc/mysql.php milw0rm.com 2007-02-21...

deV!Lz Clanportal [DZCP] <= 1.4.5 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== deV!Lz Clanportal DZCP = 1.4.5 Remote File Disclosure Vulnerability ====================================================================== DZCP Devilz Clanportal = 1.4....

PCPIN Chat <= 5.0.4 (login/language) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================== PCPIN Chat works with magicquotesgpc = Off\r\n"; echo "dork: "powered by PCPIN.com"\r\n\r\n"; if $argc "" OR...

phpmyadmin -- command execution vulnerability

A phpMyAdmin security announcement reports: Command execution: since phpMyAdmin 2.6.0-pl2, on a system where external MIME-based transformations are activated, an attacker can put into MySQL data an offensive value that starts a shell command when browsed. Enabling PHP safe mode on the server can...