CVE-2012-6621: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Email Address or 2 Custom Permalink Structure fields in admin/settings.php; 3 path parameter to admin/upload.php; 4 err paramet...

CVE-2012-4281: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to 1 holiday.php or 2 holidaybook.php, 3 id parameter to pages.php, 4 fid parameter to admin/airline-edit.php, or 5 cid parameter to...

PT-2012-5309

Name of the Vulnerable Software and Affected Versions Travelon Express version 6.2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several API endpoints, including "holiday.php" and "holiday book.php" using the hid parameter, "pages.php"...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

CVE-2011-3835

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

Art Dimension SQL Injection

Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...

Web development by Discover Web Solutions SQL injection Vulnerability

Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : Web development by Discover Web Solutions.. SQL injection Vulnerability + Date : 08 June 2011 + Author : k's0uR! + Category : WebApps + d0rk : "Web development by Discover Web...

PT-2010-5577

Name of the Vulnerable Software and Affected Versions Html-edit CMS version 3.1.8 Description The issue allows remote attackers to obtain sensitive information via direct requests to specific files, including pages.php and menu.php in includes/core files, and...

CVE-2010-4611: Exposure of Sensitive Information to an Unauthorized Actor

Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to 1 pages.php and 2 menu.php in includes/corefiles and 3 extensions/login/frontend/pages/antihacker.php, which reveals the installation path in an error message...

CVE-2010-3025: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 excerpt parameter to application/modules/admin/controllers/posts.php, as reachable by admin/posts/edit; and the 2 conten...

Eurosito (pages.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Eurosito pages.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

CVE-2010-2623

CVE-2010-2623 documents an SQL injection in pages.php of Internet DM Specialist Bed and Breakfast. The flaw allows remote attackers to inject arbitrary SQL via the pp_id parameter, potentially compromising data confidentiality, integrity, and availability (per CVSS 2.0: AV:N/AC:L/Au:N/C:P/I:P/A:P...

CVE-2010-2623: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the ppid parameter...

Golf Club SQL Injection

Exploit Title: Golf Club SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url: http://www.internetdm.co.uk/site/pages.php?fid=0,1,362 Version: N/A Tested on: Windows CVE : EXPL0!T http://server/path/pages.php?fid=0,13&ppid=38SQL Greetz to : Alnjm33-virus-pal -g3n1ux -...

Golf Club CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= Golf Club CMS SQL Injection Vulnerability ========================================= Exploit Title: Golf Club SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url:...

CVE-2010-2339: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids parameter in an updatepages action...

K9 Kreativity Design - pages.php SQL Injection

K9 Kreativity Design - pages.php SQL Injection ========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By...

K9 Kreativity Design - 'pages.php' SQL Injection

========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-06-02 Pukul 21.00 WIB +...

CVE-2010-2139

SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-2139

SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...