Free Monthly Websites 2.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================================================================== Free Monthly Websites 2.0 Multiple Vulnerabilities ==========================================================================================...

Free Monthly Websites v2.0 - Multiple Web Vulnerabilities

Document Title: =============== Free Monthly Websites v2.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=851 Release Date: ============= 2013-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 8...

CVE-2011-5255

CVE-2011-5255 corresponds to multiple XSS weaknesses in X3 CMS, affecting admin/login for version 0.4.3.1 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via PATH_INFO, username, or password parameters. Reports in the connected documents confirm the a...

CVE-2012-6507

Multiple SQL injection vulnerabilities in admin.php in ChurchCMS 0.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 uname or 2 pass parameters in a login action...

AwAuctionScript (Aw Auction Script - Market Place for WebMasters) Multiple Vulnerabilities

========================================================================================== AwAuctionScript Aw Auction Script - Market Place for WebMasters Multiple Vulnerabilities ==========================================================================================...

Sunny Navigation System cms the background filter is not strict vulnerability-vulnerability warning-the black bar safety net

BY: madmen From 1 6 3 Micro Forum Test URL http://www.xxx.com/admin/log/dispcont.asp admin/log/dispcont. asp View administrator login records where the filter is not strict lead to can view the login record of success Although success is cmd5 encryption, but a large part can be cracked Tasteless ...

SongCMS enterprise website backstage management system, several problems result getshell-a vulnerability warning-the black bar safety net

SongCMS enterprise built Station system is based on ASP+ACCESS/SQL technical site background management system, Suitable for General programmers to develop a variety of personalized corporate website,database and call the function have detailed comments; ewebeditor: inc/ewebeditor/adminlogin. asp...

Smart PHP Poll - CSRF/SQLi Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Beijing Huasheng website management system injection vulnerability-vulnerability warning-the black bar safety net

Default background: admin/Login. asp Default password: admin 1 2 3 4 5 6 exp: http://www.xxxxx.com/showpt.asp?id=1568 and 1=2 union select 1,password,3,username,5,6,7,8,9,1 0,1 1,1 2,1 3,1 4,1 5 from admin Note: error will return to the home page. As the field does not, to construct their own it!...

Hotel Booking Portal 0.1 - Multiple Vulnerabilities

----------------------------------------------------------- / | | | | | | | | | | | | | | | | | / |/ |/ \ | | || | || | | | | / | ||\,|,||| ----------------------------------------------------------- Hotel Booking Portal v0.1 Multiple Vulnerabilities Google dork: "Made And Powered By Hotels...

CVE-2012-3999

Cross-site scripting XSS vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2012-3805

Multiple cross-site scripting XSS vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 absendername, 2 absenderemail, or 3 absendernachricht parameter to the content page; 4...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 absendername, 2 absenderemail, or 3 absendernachricht parameter to the content page; 4...

Enterprise SEO professional website vulnerabilities and fixes-vulnerability warning-the black bar safety net

Program description: 1, upload to the virtual hostroot directory in. 2, If uploaded to the virtual host root directory is to modify the filespecial attention to modify the site configuration in the site address domain+“/” such as http://www. xxx. com/ or local test http://127.0.0.1/ then click on...

PHPNet 1.8 SQL Injection

SQL Injection This exploit is for a vulnerability in ler.php, but are the same vulnerability on imprimir.php and imagem.php. ler.php?id=SQLi imprimir.php?id=SQLi imagem.php?id=SQLi Usage: php file.php http://server/path/ Login bypass In login page, you can bypass the login using "SQLi strings". G...

SN News 1.2 - 'visualiza.php' SQL Injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

Mnews 1.1 - 'view.php' SQL Injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/mnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "view.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

Segue vulnerable to SQL injection

Overview Segue contains a SQL injection vulnerability. Segue is a content management system. Segue contains a SQL injection vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

Santilga CMS 1.2.6.3 Cross Site Request Forgery / SQL Injection

Exploit for php platform in category web applications ============================= Vulnerable software: Santilga CMS version 1.2.6.3 $ head -n 10 Admin.php|less view-templateName = "admin"; parent::construct; $this-lang = SantilgaLanguage::getInstance-getLanguage; $this-view-lang = $this-lang;...