CVE-2008-5047

The CVE-2008-5047 entry describes an SQL injection vulnerability in Mole Group Rental Script, specifically in admin/index.php where the username parameter can be exploited to execute arbitrary SQL commands. Affected software/component: Mole Group Rental Script’s admin/index.php. Root cause: impro...

CVE-2008-5054: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameters to customerlogin.php and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some of these details are...

CVE-2008-5047: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

accstatistics-insecure.txt

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : AccStatistics v1.1 Insecure Cookie Handling Script : http://www.accscripts.com/accstatistics.html...

CVE-2008-3782

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 Category name field under Advertisement Packages, the 2 Reason field under Credit/Debit Users, and the 3 FAQ question an...

CVE-2008-3782: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 Category name field under Advertisement Packages, the 2 Reason field under Credit/Debit Users, and the 3 FAQ question an...

SiteAdmin CMS - 'art' SQL Injection

SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel :...

CVE-2008-3322

admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipecookie cookie...

CVE-2008-3321: Improper Authentication

admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary uploadercookie cookie...

CVE-2008-3322: Improper Authentication

admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipecookie cookie...

CVE-2008-3319: Improper Authentication

admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary linkscookie cookie...

CVE-2008-3320: Improper Authentication

admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gbookcookie cookie...

CVE-2008-3318: Improper Authentication

admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary weblogcookie cookie...

CVE-2008-3317: Improper Authentication

admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary searchcookie cookie...

CVE-2008-3133: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in BareNuked CMS 1.1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-2907: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the eml parameter...

phpAuction 3.2.1 (item.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= phpAuction 3.2.1 item.php id Remote SQL Injection Vulnerability ================================================================= phpauction-gpl Version3.2 Version SQL...

phpAuction 3.2.1 - item.php SQL Injection

phpAuction 3.2.1 - item.php SQL Injection phpauction-gpl Version3.2 Version SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...

GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dork. 0day.today 2018-04...

GNUGallery 1.1.1.0 - admin.php Local File Inclusion

GNUGallery 1.1.1.0 - admin.php Local File Inclusion --==+================================================================================+==-- --==+ GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dor...