PHPX 3.x admin/page.php CSRF Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly validate access to administrative command...

Izumi <= 1.1.0 (RFI/LFI) Multiple Include Vulnerability

No description provided by source. + Izumi = 1.1.0 RFI/LFI Multiple Include Vulnerability + Discovered by cr4wl3r cr4wl3r!linuxmail.org + Download : http://sourceforge.net/projects/izumi/files/ + Code : page.php requireonce$dirinstall . $dirsrc . common.php; + Example : x RFI :...

RahnemaCo Page.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18435/info RahnemaCo is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver...

JShop E-Commerce Suite 3.0 - Page.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11003/info Reportedly the JShop E-Commerce Suite is affected by a cross-site scripting vulnerability in the 'page.php' script. This issue is due to a failure of the application to properly santitize user-supplied input. A...

CVE-2014-1618

Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 pid parameter to products.php or id parameter to 3 page.php or 4 news.php...

Wordpress Newsletter Plugin 3.2.6 (alert) Reflected XSS Vulnerability

Summary Newsletter is the perfect WordPress plugin for creating real newsletters and mail marketing system on your WordPress blog. Description The plugin suffers from a XSS issue due to a failure to properly sanitize user-supplied input to the 'alert' GET parameter in the 'page.php' script...

Epop Studio XSS/SQL Injection Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

ES CmS 0.1 - SQL Injection

Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc :...

Sql injection

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

Sql injection

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5333

CVE-2012-5333 pertains to a SQL injection vulnerability in the application component: page.php of the Pre Printing Press product. The issue is triggered by the id parameter, allowing remote attackers to execute arbitrary SQL commands. This vulnerability is rated with a CVSS v2 base score of 7.5 (...

phpMyDirectory 'id' Parameter SQL Injection Vulnerability

phpMyDirectory is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HCAMindbox CMS SQL Injection

Exploit Title: HCAMindbox cms Sql Injection Vulnerability Google Dork: Intext:"powered by Data Management Products" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.hcamindbox.com/ Tested on: all ================================== + id parametr in page.php is...

VLinks 2.0.3 SQL Injection

!x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/telechargements/Vlinks2.0.3.zip And All Version Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Bugged file is...

PicoPublisher v2.0 Remote SQL injection

Exploit for php platform in category web applications Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork :...

SyriaNobles SQL Injection

Exploit Title: SyriaNobles SQL Injection Vulnerabilitiy Google Dork: inurl:view-page.php "Powered by SyriaNobles" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubun...

Posse Sports SQL Injection

Exploit Title: Posse Sports SQL Injection Vulnerabilitiy Google Dork: "Powered By Posse Sports" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.possesports.com Version: All Version Category:: webapps Security Risk:: High Tested o...

MyPHPDating 1.0 - SQL Injection

MyPHPDating 1.0 SQL Injection Vulnerability \ ==============================================\ Software : MyPHPDating version 1.0 \ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/ \ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get App. :...

MyPHPDating 1.0 - SQL Injection

MyPHPDating 1.0 - SQL Injection MyPHPDating 1.0 SQL Injection Vulnerability \ ==============================================\ Software : MyPHPDating version 1.0 \ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/ \ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get App....

Art Dimension SQL Injection

Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...