Pub-Me CMS - Blind SQL Injection

Pub-Me CMS - Blind SQL Injection | | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requeste...

Pub-Me CMS - Blind SQL Injection

| | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requested by e-mail from vendor Found by:...

Microsoft Publisher Object Handler Validation Code Execution (MS08-027; CVE-2008-0119)

Microsoft Publisher is an application that allows users to design, layout, and format documents destined to be published in print, on the web, and various other formats. Microsoft Publisher is released as part of Microsoft Office as well as stand-alone application. Microsoft Publisher saves...

Microsoft Publisher PUB File Processing Memory Corruption (MS06-054; CVE-2006-0001)

There exists a stack overflow vulnerability in the Microsoft Publisher product. The flaw is triggered when a malicious PUB file is parsed by the affected component. A successful attack targeting this vulnerability may lead to the execution of arbitrary code. In an attack case where code injection...

Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit to the exploit-vulnerability warning-the black bar safety net

From su bun's blog Very early on saw through this vulnerability, but since Y is a bruteforce, just don't be too concerned about yesterday and a friend chat to this vulnerability, look carefully at the next, hazard is still quite large, although the need for certain conditions before they can be...

CVE-2008-6794

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6794

CVE-2008-6794 refers to a SQL injection vulnerability in the file directory.php of Scripts For Sites (SFS) EZ Pub Site. The vulnerability allows an attacker to execute arbitrary SQL commands through the cat parameter, enabling remote access to the database according to the NVD description. Relate...

CVE-2008-6794: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-5936

front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter...

CVE-2008-5936: Exposure of Sensitive Information to an Unauthorized Actor

front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter...

CVE-2008-5883

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

CVE-2008-5883

CVE-2008-5883 describes an absolute path traversal in mini-pub (front-end/dir.php) prior to version 0.3, where a full pathname supplied in the sDir parameter allows remote attackers to list arbitrary directories. Documents confirm the affected component and root cause; exploitation details are no...

CVE-2008-5883: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

Code injection

mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument...

Remote file inclusion

PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter...

CVE-2008-5579

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

Path traversal

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

CVE-2008-5579

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

CVE-2008-5581

The entry concerns CVE-2008-5581: a PHP remote file inclusion in mini-pub 0.3, specifically in mini-pub.php/front-end/img.php, exploitable via the sFileName parameter. Root cause is improper handling of user-supplied URLs, enabling remote PHP code execution. Public exploits exist (e.g., Exploit-D...