551 matches found
Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================================== Claroline works with registerglobals = On & allowurlfopen = On\r\n\r\n"; echo "dork: "Powered by Claroline" -demo\r\n\r\n"; if $argc5 echo "Usage: php ".$argv0." host...
CVE-2006-0692
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...
CVE-2006-0692
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...
Direct News SQL inj.
Direct News SQL inj. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/direct-news-sql-inj.html vendor: http://www.direct-news.net affected version: 4.9 and prior Product Description: Direct News 4.9 is an easy-to-use CMS based on php-mysql. Its rea...
phpYellowTM Pro Edition SQL inj. vuln.
phpYellowTM Pro Edition SQL inj. vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpyellowtm-pro-edition-sql-inj-vuln.html Vendor:http://phpyellow.com/ affected version: phpYellowTM Pro Edition 5.33 and phpYellowTM Lite Edition 5.33 Product...
Free ClickBank Search Engine SQL inj. vuln.
Free ClickBank Search Engine SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/free-clickbank-search-engine-sql-inj.html Vendor:http://phpfreebies.com/free-clickbank-search-engine-script.php affected version:1.0 and prior Product...
WowBB 1.65 vuln.
WowBB 1.65 vuln. Vuln. dicovered by : r0t Date: 26 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/wowbb-165-sql-vuln.html Vendor:http://www.wowbb.com affected version: 1.65 and prior Product description: WowBB is PHP/MySQL powered forum software that offers innovative features suc...
VUBB Forum SQL and XSS vuln.
VUBB Forum SQL and XSS vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html Vendor:http://www.vubb.com/ affected version: alpha rc1 Product description: Free PHP/MySQL forum/bulletin board system. The only...
phpwcms.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Author: Stefan Lochbihler Date: 14. November 2005 Software: PHPWCMS Version: 1.2.5-DEV URL: http://www.phpwcms.de Attack: Directory traversal vulnerability,CSS about: phpwcms is an Open Source web content management system. It is optimized for fast an...
PHPWCMS - Directory traversal vulnerability,CSS attack
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Author: Stefan Lochbihler Date: 14. November 2005 Software: PHPWCMS Version: 1.2.5-DEV URL: http://www.phpwcms.de Attack: Directory traversal vulnerability,CSS about: phpwcms is an Open Source web content management system. It is optimized for fast an...
PHPCalendar (and some more codegrrl.com products) arbitrary code execution
PHPCalendar and some more codegrrl.com products arbitrary code execution ========================================================================== Software: PHPCalendar, PHPClique, PHPFanBase, PHPCurrently, PHPQuotes Severity: Arbitrary code execution Risk: High Author: Robin Verton...
My Little Forum XSS Vulnerability
The remote host is running SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only From: David S. Ferreira [email protected] Subject: My Little...
VUBB XSS & path disclosure Vulnerabilities
KAPDA::10 - VUBB XSS & path disclosure vulnerabilities KAPDA New advisory Vendor: http://www.vubb.com Version: vubb alpha rc1 Bug: XSS & path disclosure Exploitation: Remote with browser Discussion: -------------------- VuBB is a Free PHP/MySQL forum/bulletin board system. Vulnerability:...
AzDGDatingLite V 2.1.3 remote code execution
AzDGDatingLite V 2.1.3 possibly prior versions remote code execution not yet tested the Platinum version software: site: http://www.azdg.com/ download page: http://www.azdg.com/scripts.php?l=english description:" AzDGDatingLite is a Free dating script working on PHP and MySQL. Multilanguage,...
landDownUnder.txt
Bugs Land Down Under v800 PHP/MySQL Website engine Copyright Neocrome - http://www.neocrome.net --------------------------------------------- Sql Injection and Cross Site Scripting Problem examlple : /ldu/forums.php?m=topics&s=' /ldu/list.php?c=articles&s=title&w=asc&o='&p=1...
ExhibitSQL.txt
SEC-CONSULT Security Advisory 20050602-2 ============================================================================= title: Exhibit Engine Blind SQL Injection program: Exhibit Engine vulnerable version: 1.22, 1.54 RC4 homepage: http://photography-on-the.net/ee/...
[Full-disclosure] SEC-CONSULT SA20050602-2 :: Exhibit Engine Blind SQL Injection
SEC-CONSULT Security Advisory 20050602-2 ============================================================================= title: Exhibit Engine Blind SQL Injection program: Exhibit Engine vulnerable version: 1.22, 1.54 RC4 homepage: http://photography-on-the.net/ee/...
[Full-disclosure] Postnuke 0.750 - 0.760rc4 local file inclusion
Product : Postnuke 0.750 http://www.postnuke.com Description: Postnuke 0.750 - 0.760rc4 local file inclusion Severity: High Description =========== Postnuke is Web Content Management System written in PHP and using mysql as database backend. Detail ====== Directory traversal in function pnModFunc...
Annuaire Netref v4.2 [ fwrite php ] vulnerability
Software: annuaire netref version : 4.2 url : http://www.netref.net Risk factor : critical Vendor has been contacted Description: ----------- Netref is a PHP/MySQL-based directory script that supports an unlimited number of categories and links. Many fonctions to manage the links : Fast search...
RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure
Hello, http://www.victimsite.com/index.php?&language=f00bar.php Warning: Failed opening '/var/www/html/admin/lang/f00bar.php' for inclusion includepath='.:/usr/share/pear' in /var/www/html/admin/settings.inc.php on line 147 This is path disclosure but it can also be used for malicious file includ...