Event Calendar PHP 1.2 - Multiple Web Vulnerabilities

Document Title: =============== Event Calendar PHP 1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=607 Release Date: ============= 2012-06-18 Vulnerability Laboratory ID VL-ID: ==================================== 607...

Red Moon Media CMS SQL Injection

Exploit Title : redmoonmedia Cms Sql Injection Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.redmoonmedia.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

动网（DVBBS）PHP论坛preview.php代码执行漏洞

动网（DVBBS）论坛系统是一个采用PHP和MYSQL的数据架构的高性能网站论坛解决方案。 在文件preview.php中： require printout'preview'; //第9行 …… 函数printout在文件inc/ dvclsmain.php中： function printout$template,$ext="tpl.php" //第464行 文件最后包含了templates\default\ preview.tpl.php文件 …… 在文件templates\default\ preview.tpl.php中： $theBody =&...

NovaBoard 1.0.3 Local File Inclusion

NovaBoard v1.0.3 preview.php theme Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Local File Inclusion registerglobals = on magicquotesgpc=off - Vulnerable code in /includes/forums/preview.php :...

CVE-2009-0448

CVE-2009-0448 concerns a directory traversal vulnerability in Syntax Desktop 2.7. The flaw resides in admin/modules/aa/preview.php, where a crafted synTarget parameter containing ".." allows remote attackers to include and execute arbitrary local files. The vulnerability enables partial impact to...

CVE-2009-0448: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the synTarget parameter...

Syntax Desktop 2.7 Local File Inclusion

-----------------:local File Include:----------------- ------------------------------------------------------- script: syntax-desktop 2-7 ------------------------------------------------------------------ download...

Unfixed XSS vulnerability at www.vykort.biz

Security researcher Uber0n, has submitted on 12/05/2008 a cross-site-scripting XSS vulnerability affecting www.vykort.biz, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/06/2008. It is currently...

CVE-2008-0683

CVE-2008-0683 describes an SQL injection in the ShiftThis Newsletter (st_newsletter) WordPress plugin, specifically via the newsletter parameter in shiftthis-preview.php. The vulnerability allows remote attackers to execute arbitrary SQL commands and can be exploited without authentication, as in...

CVE-2008-0683: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...

WordPress Newsletter Plugin - SQL Injection #2

Because of this vulnerability in shiftthis-preview.php, the attackers can execute arbitrary SQL commands via the "newsletter" parameter. Solution Update the plugin...

WordPress Plugin st_newsletter - SQL Injection

WordPress Plugin stnewsletter - SQL Injection Wordpress Plugin stnewsletter SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :"wp-content/plugins/stnewsletter" DORK 2 : allinurl :"shiftthis-preview.php" EXPLOIT :...

Wordpress Plugin st_newsletter Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Wordpress Plugin stnewsletter Remote SQL Injection Vulnerability ================================================================= Wordpress Plugin stnewsletter SQL Injectio...

WordPress Plugin st_newsletter - SQL Injection

Wordpress Plugin stnewsletter SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :"wp-content/plugins/stnewsletter" DORK 2 : allinurl :"shiftthis-preview.php" EXPLOIT :...

PT-2007-6440 · Joomla · Swmenufree

Name of the Vulnerable Software and Affected Versions: Joomla! component swMenuFree com swmenufree version 4.6 Description: A remote file inclusion issue in the preview.php file of the swMenuFree component allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute...

CVE-2007-5389: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in preview.php in the swMenuFree comswmenufree 4.6 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: a reliable third party disputes this issue because preview.php tests a...

CVE-2007-5318

TYPOlight webCMS 2.4.6 is affected by an unspecified vulnerability in preview.php that allows remote attackers to download arbitrary files via the src parameter. This entry reports a file-download capability without details on root cause or affected environments beyond TYPOlight 2.4.6, and does n...

CVE-2007-5318: Improper Input Validation

Unspecified vulnerability in preview.php in TYPOlight webCMS 2.4.6 allows remote attackers to download arbitrary files via the src parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2861: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News SAXON 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 news.php, 2 preview.php, or 3 archive-display.php...

PT-2007-4165 · Saxon · Saxon

Name of the Vulnerable Software and Affected Versions: SAXON version 4.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the template parameter to specific PHP files, including 1 "news.php", 2 "preview.php", or 3 "archive-display.php". Recommendations: Fo...