Online Notebook Manager SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== Online Notebook Manager SQL Injection Vulnerability =================================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Online Notebook Manager SQ...

CMS Chainuk 1.2 LFI / XSS

CMS Chainuk = v.1.2 Vulns Home: Cms.tut.su Dork: "Cms.tut.su, 2009 g." eLwauxc 14.06.2 LFI /index.php --------------------------------------------------------------------------- 6: if isset$GET 'id' 7: 8: color=white$id = $GET 'id';/color 9: 10: else 11: 12: $id = $index; 13: 14: if fileexists...

SkyPortal Downloads Manager 1.1 Contents Change

@=Script :SkyPortal Downloads Manager v1.1 @=S.Site :http://skyportal.net @=Download :http://skyportal.net/downloads/modules/moddownloads11.zip @=Demo :http://vegtrafikk.net @=======================================@ @=Vul: @=http://site.com/ PATH /admindlbrowse.asp @=http://site.com/ PATH...

SkyPortal Classifieds System 0.12 Contents Change Vulnerability

Exploit for unknown platform in category web applications =============================================================== SkyPortal Classifieds System 0.12 Contents Change Vulnerability =============================================================== @email protected @=Script :SkyPortal Classified...

MyDesign Sayac 2.0 SQL Injection

---- BY KACAK FROM TERRORİST CREW ---- Author : Kacak Team : Terrorist Crew / Peace Crew Contact : [email protected] Hava Serin Mevzu Derin :D Script :MyDesing Sayac v2.0 Site :http://www.mydesign.gen.tr/myforum/forumposts.asp?TID=90 Download :http://www.aspindir.com/goster/2801 Vulnerability : Au...

CVE-2008-3511

Multiple cross-site scripting XSS vulnerabilities in Softbiz Image Gallery Photo Gallery allow remote attackers to inject arbitrary web script or HTML via the 1 latest parameter to a index.php, b images.php, c suggestimage.php, and d imagedesc.php; and the 2 msg parameter to index.php, images.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to 1 admingroupdetails.asp and 2 admincategorydetails.asp...

Authentication flaw

phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a login=right cookie...

CVE-2008-3407

phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a login=right cookie...

CVE-2008-3407: Improper Authentication

phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a login=right cookie...

CVE-2008-2758

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 pblname and 2 text parameters to a admin/search.asp, 3 name parameter to b admin/publishers.asp, and other unspecified...

Authentication flaw

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

Cisco Unified Communications Manager / Cisco CallManager SQL injection

Multiple SQL injections in user and admin pages...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c...

Sql injection

Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c navigation/deleteitem.php ...

CVE-2007-4522

Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c navigation/deleteitem.php ...

CVE-2007-4522: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c navigation/deleteitem.php ...

CVE-2007-4371: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload and execute arbitrary PHP files in uploads/...

CVE-2007-3648

SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to admin/adminalbum.php and admin/admindownloads.php. NOTE: some of these details are obtained from thi...

CVE-2007-2084

PHP remote file inclusion vulnerability in MobilePublisherphp 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the authmethod parameter to 1 index.php, 2 list.php, 3 postreview.php, 4 reindex.php, 5 sections.php, 6 templates.php, 7 userinfo.php, 8 users.php, and 9 view.php...