575 matches found
[waraxe-2007-SA#055] - Sql Injection in SiteX CMS 0.7.3 Beta
waraxe-2007-SA055 - Sql Injection in SiteX CMS 0.7.3 Beta ==================================================================== Author: Janek Vind "waraxe" Date: 27. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-55.html Target software description:...
wsportal-sql.txt
netVigilance Security Advisory 33 WSPortal version 1.0 SQL Injection Vulnerability Description: WSPortal is a site management system coded in PHP/MySQL. It is capable of adding pages, adding news to pages, adding images to news articles, alerting the site or a specific ip address, private messagi...
[Full-disclosure] WSPortal version 1.0 Path Disclosure Vulnerability
netVigilance Security Advisory 32 WSPortal version 1.0 Path Disclosure Vulnerability Description: WSPortal is a site management system coded in PHP/MySQL. It is capable of adding pages, adding news to pages, adding images to news articles, alerting the site or a specific ip address, private...
[Full-disclosure] WSPortal version 1.0 SQL Injection Vulnerability
netVigilance Security Advisory 33 WSPortal version 1.0 SQL Injection Vulnerability Description: WSPortal is a site management system coded in PHP/MySQL. It is capable of adding pages, adding news to pages, adding images to news articles, alerting the site or a specific ip address, private messagi...
Comicsense 0.2 - 'index.php?epi' SQL Injection (1)
Comicsense SQL Injection Advisory/Exploit by s0cratex [email protected] http://plexinium.net - ComicSense is a script using php / mySQL. It allows you to easily host an Online Comic or Image shack. You can download it from www.gayadesign.nl/comicsense/ - The bug is a common sql injection in...
myEvent version 1.6 Multiple Path Disclosure Vulnerabilities
netVigilance Security Advisory 24 myEvent version 1.6 Multiple Path Disclosure Vulnerabilities Description: myEvent is Dynamic Calendar based Events Management system with admin panel for adding events, edit and delete built using PHP & mySQL. Display today's event and future events links on the...
[Full-disclosure] Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities
netVigilance Security Advisory 28 Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from...
Aardvark Topsites PHP Directory Disclosure Vulnerability
Aardvark Topsites PHP Directory Disclosure Vulnerability Aardvark Topsites PHP is the premier free PHP/MySQL topsites script. An attacker can see what files are in the Directory. Knowing what is there to be executed can allow for more targeted and intelligent attacks against PHP Files known to be...
php security update
CentOS Errata and Security Advisory CESA-2007:0076 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
flashChat 4.7.8 Cross Site Scripting Vulnerability
/ Flashchat 4.7.8 / Date of written Advisory: February 04, 2007 Product: Flash Chat = 4.7.8 Vendor: http://tufat.com/ Description: flashChat is a highly customizable PHP/MySQL based chat room script that is easily integrated into a website and mimics IRC in it's command structure Exploits /...
timberwolf122-xss.txt
-=--------------------ADVISORY-------------------=- TimberWolf 1.2.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: TimberWolf -=+ Version: 1.2.2 -=+ Vendor's URL: http://cms.gamezrule.org/index.php -=+ Platform: Windows\Linux\Unix -=+ Bug...
MTCMS 2.0 - adminadmin_settings.php Remote File Inclusion
MTCMS 2.0 - adminadminsettings.php Remote File Inclusion !/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on...
MTCMS 2.0 - '/admin/admin_settings.php' Remote File Inclusion
!/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on +------------------------------------------------------------------------------------------- use Getopt::Long; use URI::Escape; use...
MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit
Exploit for unknown platform in category web applications =================================================================== MTCMS \n"; print "-h, --host\ttarget host\texample.com\n"; print "-f, --file\tremote file\thttp://evilsite.com/shell.php\n"; print "-d, --dir\tinstall dir\t/mtcms\n"; exit...
Php/Mysql Site Builder 0.0.2 (htm2php.php) File Disclosure Vulnerability
Exploit for unknown platform in category web applications ======================================================================== Php/Mysql Site Builder 0.0.2 htm2php.php File Disclosure Vulnerability ======================================================================== PHPBuilder v0.0.2 Remo...
Paristemi 0.8.3b (buycd.php) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor...
Paristemi 0.8.3b - buycd.php Remote File Inclusion
Paristemi 0.8.3b - buycd.php Remote File Inclusion +------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +-----------------------------------------------------------------------------------------...
Paristemi 0.8.3b (buycd.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== Paristemi 0.8.3b buycd.php Remote File Include Vulnerability ==============================================================...
Paristemi 0.8.3b - 'buycd.php' Remote File Inclusion
+------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............: http://www.paristemi.com/...
Hot Links download backup authorized vulnerabilities (re-post with some edit)
Hot Links is web directory system provided by mrcgiguy.com contain PHP+MySQL version and Perl version and PHP withou MySQL. All version are vulnerabilities If admin backup database will store on server and attacker can download without authorized: http://domain.ext/path/dlback.php?dl=fullback for...