2382 matches found
Flashlight Free Edition <= 1.0 SQLi and Directory Traversal Vulnerability
Flashlight Free Edition is prone to SQL injection SQLi and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
OS Commerce 2.2r2 authentication bypass
Exploit for unknown platform in category web applications ======================================= OS Commerce 2.2r2 authentication bypass ======================================= When this hole was brought to our attention, we were amazed to find that it seems nobody has caught it yet!! There is a...
OS Commerce 2.2r2 - Authentication Bypass
When this hole was brought to our attention, we were amazed to find that it seems nobody has caught it yet!! There is a page in the admin that can be access without login AND can pass parameters!! /admin/mail.php/login.php /admin/mail.php/login.php?fooled...
BPStudent 1.0 SQL Injection
x========================================================================================================================================x | AntiSecuritydotorg |...
Four of the General government, CMS management system vulnerability-vulnerability warning-the black bar safety net
This article has been published in the hack Defense 2 0 0 9. 5 period of,reproduced be sure to keep this information QQ friends of small building to listen to rain to say their school site is using the four through the government grid is set, let me check its safety. Just the hands on work done,...
CVE-2009-3173
Unrestricted file upload vulnerability in admin/addalbum.php in The Rat CMS Alpha 2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/...
CVE-2008-7044
SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script AJPoll Database version allows remote attackers to execute arbitrary SQL commands via the ques parameter...
asaher pro 1.0.4 Database Backup
::::::::::::::::::::::::::::::::::::::: found by alnjm33 my site : http://sec-war.com/cc/ mail:alnjm33athotmail.com :::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup Vulnerability::::::::::::::::::::::::::: expolit:...
Fedora 10 : wordpress-mu-2.8.4a-1.fc10 (2009-8538)
Update spans MU-versions for the following security releases from upstream: http://wordpress.org/development/2009/08/2-8-4-security-release/ http://wordpress.org/development/2009/08/wordpress-2-8-3-security-rele ase/ - Backport of XSS fixes from WordPress 2.8.2 Backport of security fixes for...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentication of administrators for requests that delete 1 categories or 2 groups; 3 ban users; or 4 delete users via the admin page...
CVE-2008-6905
Cross-site request forgery CSRF vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentication of administrators for requests that delete 1 categories or 2 groups; 3 ban users; or 4 delete users via the admin page...
CVE-2008-6905
Cross-site request forgery CSRF vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentication of administrators for requests that delete 1 categories or 2 groups; 3 ban users; or 4 delete users via the admin page...
CVE-2008-6905
CVE-2008-6905 affects BabbleBoard 1.1.6, with a CSRF vulnerability in index.php. The issue allows remote authenticated users to hijack administrator authentication to perform admin-page actions such as deleting categories or groups, banning users, or deleting users. Root cause details and explici...
CVE-2009-2388
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-2342
Cross-site scripting XSS vulnerability in admin.php aka the login page in Content Management Made Easy CMME before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field...
CVE-2009-2018
SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter...
Sql injection
SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter...
Sql injection
Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via 1 the uNev parameter aka the username field or 2 the uJelszo parameter aka the Password field...
CVE-2009-1816
SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter aka the username field. NOTE: some of these details are obtained from third party information...