Maran Blog XSS vulnerability

Application: Maran Blog Web Site: http://www.maran.pamil-visions.com/maranblog.php Versions: no Version numbers could be found. Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes Advisory File:http://www.secvsn.com/content/Advisories/sr-060607-maran.html...

e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php / Explanation: Bug 1 admin/showimg.php: ?php $fp = fopen$GET'img', "r"; $img = fread$fp, filesize$GET'img'; fclose$fp; header"Content-type: ".$GET'type'; echo $img; ? ...need i say more? Bug 2 admin/functions.php: if...

e-Vision CMS 2.02 - SQL Injection Remote Code Execution

e-Vision CMS 2.02 - SQL Injection Remote Code Execution !/usr/bin/php -q -d shortopentag=on ...need i say more? Bug 2 admin/functions.php: if isset$COOKIE'adminlang' $languageselector = $COOKIE'adminlang'; else $languageselector = "en"; include"lang/".$languageselector.".php"; ...speaks for it se...

Unfixed XSS vulnerability at www.islamicvision.co.uk

Security researcher Hotpockets, has submitted on 06/06/2007 a cross-site-scripting XSS vulnerability affecting www.islamicvision.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2007. It is...

PostNuke pnFlashGames Module 1.5 - SQL Injection

PostNuke pnFlashGames Module 1.5 - SQL Injection ============================================================ PostNuke pnFlashGames Module v1.5 REmote SQL Injection ============================================================ Bulan: xoron xoron.biz + Love's the funeral of hearts The funeral of...

E-Vision.txt

Hello,, E-Vision CMS Multible Remote injections SQL and File upload Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] upload any file admin/ximage.php this file is used to upload files and it does not check the permission This...

CVE-2006-5016

Unrestricted file upload vulnerability in admin/ximage.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitrary files to the /imagebank directory...

CVE-2006-5017

SQL injection vulnerability in admin/allusers.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the from parameter...

CVE-2006-5017

SQL injection vulnerability in admin/allusers.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the from parameter...

CVE-2006-5016

Unrestricted file upload vulnerability in admin/ximage.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitrary files to the /imagebank directory...

CVE-2006-5017

CVE-2006-5017 corresponds to a SQL injection vulnerability in Szava Gyula and Csaba Tamas e-Vision CMS, affecting the admin/all_users.php component. The issue allows remote attackers to inject arbitrary SQL commands through the from parameter, enabling potential data disclosure or modification. P...

CVE-2006-5016

The CVE concerns Szava Gyula and Csaba Tamas e-Vision CMS (likely version 1.0). The vulnerable component is admin/x_image.php, where an unrestricted file upload allows remote attackers to place arbitrary files in the /imagebank directory. The vulnerability’s root cause is an unconstrained upload ...

CVE-2006-5016: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/ximage.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitrary files to the /imagebank directory...

CVE-2006-5017: Undefined Security Weakness

SQL injection vulnerability in admin/allusers.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the from parameter...

E-Vision CMS Multible Remote injections

Hello,, E-Vision CMS Multible Remote injections SQL and File upload Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] upload any file admin/ximage.php this file is used to upload files and it does not check the permission This...

e-Vision CMS 2.0 - all_users.php SQL Injection

e-Vision CMS 2.0 - allusers.php SQL Injection !/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+...

e-Vision CMS 2.0 (all_users.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? / / e-Vision CMS Remote sql injection exploit / By : HACKERS PAL / WwW.SoQoR.NeT / printr' // / e-Vision CMS Remote sql injection exploit / / by HACKERS PAL [email protected] / / site: http://www.soqor.net /'; if $argc2...

e-Vision CMS 2.0 (all_users.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= e-Vision CMS 2.0 allusers.php Remote SQL Injection Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on / / site:...

e-Vision CMS 2.0 - 'all_users.php' SQL Injection

!/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+ User Name : "; pregreplacecallback'/\td...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the fields in a user's profile...