SiteAdmin CMS - 'art' SQL Injection

SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel :...

CVE-2008-3322

admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipecookie cookie...

CVE-2008-3321: Improper Authentication

admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary uploadercookie cookie...

CVE-2008-3319: Improper Authentication

admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary linkscookie cookie...

CVE-2008-3322: Improper Authentication

admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipecookie cookie...

CVE-2008-3320: Improper Authentication

admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gbookcookie cookie...

CVE-2008-3318: Improper Authentication

admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary weblogcookie cookie...

CVE-2008-3317: Improper Authentication

admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary searchcookie cookie...

CVE-2008-3133: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in BareNuked CMS 1.1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-2907: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the eml parameter...

phpAuction 3.2.1 (item.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= phpAuction 3.2.1 item.php id Remote SQL Injection Vulnerability ================================================================= phpauction-gpl Version3.2 Version SQL...

phpAuction 3.2.1 - item.php SQL Injection

phpAuction 3.2.1 - item.php SQL Injection phpauction-gpl Version3.2 Version SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...

GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dork. 0day.today 2018-04...

GNUGallery 1.1.1.0 - admin.php Local File Inclusion

GNUGallery 1.1.1.0 - admin.php Local File Inclusion --==+================================================================================+==-- --==+ GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dor...

CVE-2008-2280

CVE-2008-2280 describes a cross-site scripting (XSS) vulnerability in admin/index.php of Script PHP PicEngine 1.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the l parameter. The description notes the information provenance as third-party. The provided do...

CVE-2008-2280: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-2207

The CVE-2008-2207 entry covers a Cross-site Scripting (XSS) vulnerability in Maian Gallery 2.0, specifically in admin/index.php where the keywords parameter of a search action can be exploited to inject arbitrary script/HTML by an unauthenticated remote attacker. The affected component is Maian G...

CVE-2008-2207: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/index.php in Maian Gallery 2.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...

CVE-2008-2200: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter to admin/index.php in a blogs search action, the 2 msgcharset and 3 msgheader9 parameters to admin/inc/header.php, and the 4 keywords...

CVE-2008-0428: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the login function in system/classpermissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/index.php...