4796 matches found
PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ====================================================================== PHPDirector = 0.21 videos.php id Remote SQL Injection Vulnerability ====================================================================== PHPDirector = 0.21 SQL...
PHPDirector 0.21 - videos.php?id SQL Injection
PHPDirector 0.21 - videos.php?id SQL Injection PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net milw0rm.com 200...
PHPDirector 0.21 - 'videos.php?id' SQL Injection
PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net milw0rm.com 2007-07-02...
[Full-disclosure] eTicket version 1.5.5 Path Disclosure Vulnerability
netVigilance Security Advisory 30 eTicket version 1.5.5 Path Disclosure Vulnerability Description: eTicket is an electronic open source support ticket system based on osTicket, that can receive tickets via email pop3 or pipe and a web-based form, as well as manage them using a web interface...
Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities
netVigilance Security Advisory 35 Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities Description: Calendarix is a powerful and easy to use calendar based on PHP and MySQL. It has been developed with ease of use and quick access to information in mind. It provides the user...
Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities
netVigilance Security Advisory 36 Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities Description: Calendarix is a powerful and easy to use calendar based on PHP and MySQL. It has been developed with ease of use and quick access to information in mind. It provides the user...
[Full-disclosure] Overwrite variables eqDKP 1.3.2d and prior (login.php)
If you want to run old code that relies on registerglobals temporarily, make sure you use one of the non-overwriting extracttype values such as EXTRSKIP and be aware that you should extract in the same order that's defined in variablesorder within the php.ini ----- eqDKP 1.3.2d and prior login.ph...
CVE-2007-3367: Undefined Security Weakness
Simple CGI Wrapper scgiwrap in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtain sensitive information via a direct request, which reveals the path in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from...
LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== LiveCMS = 3.4 categoria.php cid Remote SQL Injection Exploit =============================================================== !/usr/bin/perl / \ / \ | | | | | | | | | | | / | |...
LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection,&nbs...
LiveCMS 3.4 - categoria.php?cid SQL Injection
LiveCMS 3.4 - categoria.php?cid SQL Injection !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection, Absolute Path Disclosure, XSS Injection, Arbitrary File...
LiveCMS 3.4 - 'categoria.php?cid' SQL Injection
!/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection, Absolute Path Disclosure, XSS Injection, Arbitrary File Upload Description This is a free CMS system...
[Full-disclosure] WSPortal version 1.0 Path Disclosure Vulnerability
netVigilance Security Advisory 32 WSPortal version 1.0 Path Disclosure Vulnerability Description: WSPortal is a site management system coded in PHP/MySQL. It is capable of adding pages, adding news to pages, adding images to news articles, alerting the site or a specific ip address, private...
cactushop-mdb.txt
Cactushop V6 allows remote users to download the database which contains creditcard numbers and critical information. The affected carts default installation gives away the path to database file. As a result, an attacker exploiting this vulnerability will be able to obtain detailed private custom...
CVE-2007-3079
listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path...
CVE-2007-3079: Undefined Security Weakness
listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path...
[Full-disclosure] Full Path Disclosure eqDKP 1.3.2c and prior
eqDKP 1.3.2c and prior 'compare' variable reveals the full path because eqdkp fails to properly sanitize user-supplied input Example: /path-to-eqdkp/listmembers.php?compare=00 Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored b...
CERN İmage Map Dispatcher
CERN Image Map Dispatcher /cgi-bin/htimage.exe comes by default with FrontPage. I found three bugs in "htimage.exe": 1 Gives us the full path to the root directory 2 Simple buffer overflow 3 Allow us to access files. Problem 1 Like I said, the first bug gives us the full path to the root director...
CACTUSHOP 6 Default Installation Allows Remote Database Disclosure
Cactushop V6 allows remote users to download the database which contains creditcard numbers and critical information. The affected carts default installation gives away the path to database file. As a result, an attacker exploiting this vulnerability will be able to obtain detailed private custom...
Full Path Disclosure in SendCard
Hello Vulnerable : SendCard Version : 3.3.0 Web : http://www.sendcard.org Exploit : http://example.com/sendcard/sendcard.php?sclanguage='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,...