1380 matches found
Design/Logic Flaw
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter...
CVE-2009-3113
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter...
CVE-2009-3113
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter...
CVE-2009-3113
The CVE-2009-3113 entry describes an unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition prior to 4.1.2, 3.x, and 2.x that allows remote attackers to gain write access to product reviews via a crafted parameter. Related connected sources corroborate impact prim...
PHP-Nuke 8.0 SQL Injection / Remote Shell
==================================== PHP-Nuke Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com Product:...
Economy, SMB security to dominate at RSA Conference
As a security show, the RSA Conference leaves a lot to be desired. Its technical sessions carry an uncomfortable load of marketing baggage and don’t have either the cachet or entertaining edge of those at Black Hat or CanSecWest. Anyone will tell you that the real business of RSA is happening off...
Directory traversal
Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the 1 ContactPlus and 2 Reviews modules, and 3 the modulename parameter to...
CVE-2009-0457
Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the 1 ContactPlus and 2 Reviews modules, and 3 the modulename parameter to...
AJA Portal 1.2 Local File Inclusion Vulnerabilities (win)
Exploit for unknown platform in category web applications ========================================================= AJA Portal 1.2 Local File Inclusion Vulnerabilities win ========================================================= -------------:multi local file include:------------ ---------------...
AJA Portal 1.2 Local File Inclusion Vulnerabilities (win)
No description provided by source. -------------:multi local file include:------------ --------------- script:AJA 1.2 ------------------------------------------------------------------ download from:http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6...
AJA Portal 1.2 Local File Inclusion
-------------:multi local file include:------------ --------------- script:AJA 1.2 ------------------------------------------------------------------ download from:http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6 ------------------------------------------------------------------...
AJA Portal 1.2 (Windows) - Local File Inclusion
-------------:multi local file include:------------ --------------- script:AJA 1.2 ------------------------------------------------------------------ download from:http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6 ------------------------------------------------------------------...
Active Price Comparison v 4 (ProductID) Blind SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرØمن الرØيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: Ñ3d D3v!L Date:...
5 star review - Cross-Site Scripting / SQL Injection
Viva IslaM Viva IslaM XSS / Remote SQL Injection Five Star Review recommend.php itemid http://review-script.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploites :- User Exploite...
CVE-2008-3669
SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script aka ZeeReviews allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2008-3669
The CVE-2008-3669 entry concerns ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (aka ZeeReviews). Affected component: comments.php. Root cause: SQL injection via the ItemID parameter. Impact: remote attacker could execute arbitrary SQL commands, enabling data access/manipul...
CVE-2008-1783
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...
Design/Logic Flaw
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...
CVE-2008-1783
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...
CVE-2008-1783
Prozilla Reviews 1.0 is affected by CVE-2008-1783. A remote attacker can delete arbitrary users by supplying a modified UserID parameter in a direct request to siteadmin/DeleteUser.php. The NVD lists a base score of 6.4 (MEDIUM) with network access and low attack complexity; confidentiality is no...