2031 matches found
WeBid <= 1.0.2 (converter.php) Remote Code Execution Exploit
Exploit for php platform in category web applications checkmysql$res, $query, LINE, FILE; 157. $itemtitle = mysqlresult$res, 0, 'title'; Input passed through $REQUEST'auctionid' isn't properly sanitised before being used in the SQL query at line 154. - Vulnerable code to SQL injection works with...
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities (CVE-2011-1099)
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...
Quick Polls 1.0.1 Local File Inclusion / Deletion
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...
WordPress Plugin PHP Speedy 0.5.2 - 'admin_container.php' Remote Code Execution
-d OPTIONS host: target server ip/hostname path: directory path to wordpress Options: -pip:port:...
PT-2011-1654
Name of the Vulnerable Software and Affected Versions PHP versions 5.3.2 through 5.3.3 Description The issue arises from the interaction between the set magic quotes runtime function and the mysqli fetch assoc function when the MySQLi extension is used. This might facilitate context-dependent...
PT-2011-2346 · Tinybb · Tinybb
Name of the Vulnerable Software and Affected Versions: tinyBB version 1.2 Description: The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This can be achieved via the id parameter in a profile action to "index.php". Recommendations: For tinyBB...
Lotus CMS Fraise 3.0 - Local File Inclusion / Remote Code Execution
!/usr/bin/python Lotus CMS Fraise v3.0 LFI - Remote Code Execution Exploit greetz Tecr0C :0 Vuln: lines 15-23 in core/lib/router.php ---------- sof //Get page request if any $page = $this-getInputString"page", "index"; //Get plugin request if any $plugin = $this-getInputString"system", "Page"; //...
Joomla! Plugin Captcha 4.5.1 - Local File Disclosure
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com Joomla Captcha Plugin 0 95 for $i = 0; $i...
Ignition 1.3 - 'page.php' Local File Inclusion
Ignition 1.3 page Local File Inclusion Vulnerability disclosed by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz note: 1. Magicquotesgpc should be turned off in order to exploit this vulnerability 2. LFI bugs found by me in previous version 1.2 are still...
www.eVuln.com : Authentication Bypass by SQL Injection in Social Share
www.eVuln.com advisory: Authentication Bypass by SQL Injection in Social Share Summary: http://evuln.com/vulns/167/summary.html Details: http://evuln.com/vulns/167/description.html -----------Summary----------- eVuln ID: EV0167 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level...
CVE-2010-4517
SQL injection vulnerability in the JExtensions JE Auto comjeauto component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php...
Joomla! Component JE Auto 1.0 - SQL Injection
Joomla! Component JE Auto 1.0 - SQL Injection JE Auto 1.0 SQL Injection Vulnerability Name JE Auto Vendor http://joomlaextensions.co.in/extensions/components/je-auto.html Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at...
PT-2010-5482
Name of the Vulnerable Software and Affected Versions Brunetton LittlePhpGallery version 1.0.2 Description The issue allows remote attackers to list, include, and execute arbitrary local files. This is achieved by exploiting a directory traversal vulnerability in the gallery.php file when the mag...
Sql injection
Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...
chCounter <= 3.1.3 SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================== chCounter = 3.1.3 SQL Injection Vulnerability ============================================== !/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias...
chCounter 3.1.3 - SQL Injection
!/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias [email protected]. Software Link: http://chcounter.org/chCounter3/getfile.php?id=5 Version: 3.1.3 Tested on: Ubuntu Server 10.04 with apache Requirements: - Downloads must be...
Joomla! Component ProDesk 1.5 - Local File Inclusion
Joomla! Component ProDesk 1.5 - Local File Inclusion ------------------------------------------------------------------------------------------------------- Joomla Component ProDesk v 1.5 comprodesk&includefile Local File Inclusion http://joomlashowroom.com Price - $ 49.99...
PT-2010-5323 · Deluxebb · Deluxebb
SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic quotes gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-103...
PT-2010-5315
Name of the Vulnerable Software and Affected Versions phpCheckZ version 1.1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter when magic quotes gpc is disabled. Recommendations For phpCheckZ version 1.1.0, consider disabling t...
Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple XSS Vulnerabilities
Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple Cross-Site Scripting Vulnerability. SecPod Technologies www.secpod.com Author Veerendra G.G SecPod ID: 1005 09/07/2010 Issue Discovered 09/10/2010 Vendor Notified 09/13/2010 Vendor Confirmed 09/14/2010 Fix Available Class: Cross-Si...