Ocean CMS V6.48 File Traversal and Arbitrary File Deletion Vulnerabilities

Ocean Movie System aka Ocean CMS seacms is a PHP movie system. Ocean CMS version 6.48 \admin\admintemplate.php page file traversal and arbitrary file deletion vulnerability, allowing attackers to exploit the vulnerability to obtain, delete arbitrary files, can lead to system reinstallation...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03506)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.fplinks.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2017-17341

Name of the Vulnerable Software and Affected Versions paintballrefjosh/MaNGOSWebV4 version 4.0.8 Description The issue concerns a reflected XSS in the inc/admin/template files/admin.fplinks.php file, specifically affecting the linkid parameter. Recommendations For version 4.0.8, avoid using the...

PT-2017-17340

Name of the Vulnerable Software and Affected Versions paintballrefjosh/MaNGOSWebV4 version 4.0.8 Description The issue is related to a reflected XSS in the inc/admin/template files/admin.donate.php file, specifically affecting the id parameter. Recommendations For version 4.0.8, avoid using the i...

INDEXU <= 5.0.1 (admin_template_path) Remote Include Vulnerabilities

No description provided by source...

AnnonceScriptHP 2.0 Templates/admin.dwt.php email Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Et-Chat Shell Upload

-------------------- IN The NAme OF God -------------------- -====Et-chat remote file uploader RFU====- Exploit Title:Et-chat remote file uploader RFU Exploit Author: FarbodEZRaeL Tested on: xp MAil : [email protected] -====Dork====- inurl:/styles/admintpl/ -====Exploit====-...

net2ftp 'admin1.template.php' Local and Remote File Include Vulnerabilities

The 'net2ftp' program is prone to a local file-include vulnerability and a remote file-include vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to obtain sensitive information; other attacks are also possible. net2ftp...

CVE-2010-0158: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JoomlaBamboo JB Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the comcontent component, reachable through index.php. NOTE: the vendor disputes this report, saying:...

Joomla Bamboo Simpla Admin Template SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Joomla Bamboo Simpla Admin Template suffer from REMOTe sql injection Vendor: .joomlabamboo.com ? Software:Joomla Bamboo Simpla Admin Template - ? author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ?...

Joomla! Component Bamboo Simpla Admin Template - SQL Injection

Joomla! Component Bamboo Simpla Admin Template - SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Joomla Bamboo Simpla Admin Template suffer from REMOTe sql injection Vendor: .joomlabamboo.com ? Software:Joomla Bamboo Simpla Admin Template ...

Joomla! Component Bamboo Simpla Admin Template - SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Joomla Bamboo Simpla Admin Template suffer from REMOTe sql injection Vendor: .joomlabamboo.com ? Software:Joomla Bamboo Simpla Admin Template - ? author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ?...

Indexu 5.0.1 - admin_template_path Remote File Inclusion

Indexu 5.0.1 - admintemplatepath Remote File Inclusion indexu remote file include -------------------------------------------------| Discovered By CrAshoVeRrIdE | Arabian Security Team | -------------------------------------------------| site of script:http://www.nicecoder.com/...