TSOKA:CMS 1.1/1.9/2.0 - SQL Injection / Cross-Site Scripting

----------------------------------------------------------------------------------------------------------------------- TSOKA:CMS v1.1 , v1.9 AND v2.0 SQL Injection & XSS Vulnerability http://www.alanzard.com from italy...

Netpet CMS Directory Traversal Vulnerability

The host is running Netpet CMS and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodnetpetcmsdirtravvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Netpet CMS Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

Address Book Script 1.9 Local File Inclusion

Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/scripts/AB201109/AB201109.zip Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/cfg/common.inc.php?LANGCODE=../../../../../../etc/passwd%00...

Address Book Script v 1.09 - Local File Inclusion

Exploit for unknown platform in category web applications =============================================================== Address Book Script v 1.09 - Local File Inclusion Vulnerability =============================================================== Application Info: Name: Address Book Script...

Address Book Script 1.09 - Local File Inclusion

Address Book Script 1.09 - Local File Inclusion Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/addressbook.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Allied Telesyn TFTP (AT-TFTP) ServerDaemon 1.9 - Denial of Service

Allied Telesyn TFTP AT-TFTP ServerDaemon 1.9 - Denial of Service // // //Vulnerability: Remote Buffer Overflow Exploit //Impact: Remote Denial of Service Attack //Vulnerable Application: TFTP Daemon Version 1.9 //Tested on Windows XP Service Pack II // //Author: Socket0x03 //Contact: Socket0x03 a...

TFTP Daemon v1.9 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================== TFTP Daemon v1.9 Denial of Service Exploit ========================================== Title: TFTP Daemon v1.9 Denial of Service Exploit CVE-ID: OSVDB-ID: Author: Socket0x03 Published: 2009-12-22 Verified...

TFTP Daemon v1.9 Denial of Service Exploit

No description provided by source. / // //Vulnerability: Remote Buffer Overflow Exploit //Impact: Remote Denial of Service Attack //Vulnerable Application: TFTP Daemon Version 1.9 //Tested on Windows XP Service Pack II // //Author: Socket0x03 //Contact: Socket0x03 at teraexe dot com email conceal...

Moodle File Disclosure Vulnerability (Mar 2009)

Moodle is prone to a file disclousure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; if descripti...

DEBIAN-CVE-2008-5813

SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information...

Simple Forum Version 1.7-1.9(pagename)

Simple Forum Version 1.7-1.9pagename AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: "index.php?pagename"forum DORK 2 : Simple Forum - Version 1.7 Simple Forum - Version 1.9 EXPLOIT :...

Yellow Swordfish Simple Forum 1.7/1.9 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/27824/info Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

wpsf17-sql.txt

Simple Forum Version 1.7-1.9pagename AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "index.php?pagename"forum DORK 2 : Simple Forum - Version 1.7 Simple Forum - Version 1.9 EXPLOIT :...

PT-2007-5481 · Unknown · X-Script Guestbook

Name of the Vulnerable Software and Affected Versions: Guestbook Script version 1.9 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the script root parameter to various PHP files, including 'delete.php', 'edit.php', 'inc/common.inc.php', 'database.php',...

DEBIAN-CVE-2007-1055

Cross-site scripting XSS vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a duplicate of CVE-2007-0177...

PHPMyChat Plus 1.9 - Multiple Local File Inclusions

PHPMyChat Plus 1.9 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/20972/info phpMyChat is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an unauthorized user to view file...

SPIP 1.8/1.9 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16458/info SPIP is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to compromise...

WebMatic Unspecified Login Function Access Vulnerability

The remote host is running WebMatic, a web-based application designed to generate websites. The vendor has released WebMatic 1.9 to address an unknown flaw in earlier versions of the software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...