Maian Weblog 2.0 print.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject arbitrary SQ...

WM-News 0.5 Print.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19968/info WM-News is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlyin...

PT-2012-5290

Name of the Vulnerable Software and Affected Versions myCare2x affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters to various P...

PT-2012-3529

Name of the Vulnerable Software and Affected Versions CreateVision CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the artykul print.php file. Recommendations At the moment, there is no information about a...

Portix-CMS 1.5.0. rc5 Local File Inclusion Vulnerability

Exploit for php platform in category web applications -==================== in The Name Of aLLah ====================- Title: Portix-CMS 1.5.0. rc5 Local File Inclusion Google Dork: inurl:livriel.php?livriel= Date: n/a Author: Or4nG.M4n Link:...

Portix-CMS 1.5.0. rc5 - Local File Inclusion

Portix-CMS 1.5.0. rc5 - Local File Inclusion -==================== in The Name Of aLLah ====================- Title: Portix-CMS 1.5.0. rc5 Local File Inclusion Google Dork: inurl:livriel.php?livriel= Date: n/a Author: Or4nG.M4n Link:...

Portix-CMS 1.5.0. rc5 - Local File Inclusion

-==================== in The Name Of aLLah ====================- Title: Portix-CMS 1.5.0. rc5 Local File Inclusion Google Dork: inurl:livriel.php?livriel= Date: n/a Author: Or4nG.M4n Link: http://www.easy-script.com/scripts-PHP/portix-cms-150-rc5-3005.html Version: v1.5.0. rc5 Tested on: windows ...

Joomla Team SQL Injection

Joomla Component comteam SQL Injection Vulnerability Author : CoBRa21 Dork : inurl:comteam Exploit http://localhost/PATH/print.php?task=person&id=36 and 1=1 http://localhost/PATH/print.php?task=person&id=36 and 1=2 http://localhost/PATH/print.php?task=person&id=36 SQL Ordu-yu Lojistik TIM // CoBR...

Joomla! Component com_team - SQL Injection

Joomla! Component comteam - SQL Injection Joomla Component comteam SQL Injection Vulnerability Author : CoBRa21 Dork : inurl:comteam Exploit http://localhost/PATH/print.php?task=person&id=36 and 1=1 http://localhost/PATH/print.php?task=person&id=36 and 1=2...

CVE-2010-2716: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 ndetail.php and 2 print.php...

PsNews 1.3 SQL Injection

Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor : http://www.psnews.sourceforge.net Version : 1.3 Tested on : Linux & Windows Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==- http://www.site.com/path/ndetail.php?id=SQL1...

Tainos Sosua-News SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Tainos...

CVE-2010-0753: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SQL Reports comsqlreport component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter to ajax/print.php. NOTE: some of these details are obtained from third party information...

xoops 1.02 print.php Sql注入漏洞

No description provided by source...

Unfixed XSS vulnerability at www.scu.edu.au

Security researcher lljkrieg, has submitted on 24/07/2009 a cross-site-scripting XSS vulnerability affecting www.scu.edu.au, which at the time of submission ranked 75237 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is currentl...

CVE-2008-6129

CVE-2008-6129 affects moziloWiki 1.0.1 and earlier. A directory-traversal in print.php allows remote attackers to read arbitrary files by providing .. in the page parameter. The NVD entry lists a MEDIUM base score (4.3) with network attack vector and partial confidentiality impact, but exploitati...

CVE-2008-6129: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in print.php in moziloWiki 1.0.1 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2008-5968

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...

CVE-2008-5968

CVE-2008-5968 affects PHP iCalendar 2.24 and earlier. It is a directory traversal vulnerability in print.php that allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter of a phpicalendar_* cookie. This is a different vector than CV...

Sql injection

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...