CVE-2009-1458

CVE-2009-1458 affects razorCMS prior to 0.4. The admin/index.php file contains multiple XSS flaws that allow remote attackers to inject arbitrary web script or HTML via (1) slab in the edit action, (2) catname in showcats, and (3) cat in reordercat. Impact is web-script/HTML injection without use...

CVE-2009-1366

Cross-site scripting XSS vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke DNN before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "name/value pairs" and "paypal IPN functionality."...

WysGui CMS 1.2b (Insecure Cookie Handling) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Phorum < 5.2.10 Cross-Site Scripting/Request Forgery

=cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL:...

Limbo CMS 1.0.4.2 - Cross-Site Request Forgery Privilege Escalation

Limbo CMS 1.0.4.2 - Cross-Site Request Forgery Privilege Escalation Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons Luja download : http://www.limboportal.com/index.php/option/downloads/task/download/id/67 d00rk: intext:"site powered by limbo"...

Phorum Cross Site Scripting / Request Forgery

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL: http://research.voodoo-labs.org/advisories/...

CVE-2008-6714

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecmsusername cookie...

Authentication flaw

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecmsusername cookie...

CVE-2008-6714

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecmsusername cookie...

Gravity Board X 2.0b SQL Injection / Post Auth Code Execution

No description provided by source. ================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Sql injection

SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Gravity Board X 2.0 Beta - SQL Injection (Authenticated) Code Execution

Gravity Board X 2.0 Beta - SQL Injection Authenticated Code Execution ================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution

================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

CVE-2008-6525

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...

Sql injection

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...

CVE-2008-6525

The CVE CVE-2008-6525 affects the Nice PHP FAQ Script Admin Panel and is caused by an SQL injection in the Password field (pass). Remote attackers can execute arbitrary SQL commands through this input vector. Exploitation is supported by external references (e.g., Exploit-DB). No remediation deta...

CVE-2008-6525

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...

Free Arcade Script 1.0 SQL Injection / Shell Upload

.--------------------------------------------------------------------------. | Web Application : Free Arcade Script 1.0 | | Homepage : http://www.freearcadescript.net | |--------------------------------------------------------------------------| | Vulnerability : SQL Injection + Remote PHP file...

Free Arcade Script 1.0 Auth Bypass (SQL) / Upload Shell Vulnerabilities

No description provided by source. .--------------------------------------------------------------------------. | Web Application : Free Arcade Script 1.0 | | Homepage : http://www.freearcadescript.net | |--------------------------------------------------------------------------| | Vulnerability ...

Free Arcade Script 1.0 Auth Bypass (SQL) / Upload Shell Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= Free Arcade Script 1.0 Auth Bypass SQL / Upload Shell Vulnerabilities =======================================================================...