EUVD-2012-1941

Malware in sbrugna...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15863)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setResetOptions method in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'adminemail' and...

CVE-2015-6528

Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...

Uiga Personal Portal index.php (view) SQL Injection

No description provided by source. Exploit Title: Uiga Personal Portal index.php view SQL Injection Vulnerability Date: 27-4-2010 Author: 41.w4r10r Software Link : http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork ...

phpMyNewsletter <= 0.8b5 (archives.php msg_id) SQL Injection Exploit

No description provided by source. !/usr/bin/php ?php / Name: PHPMyNewsletter = 0.8b5 SQL Injection Credits: Charles "real" F. charlesfolathotmail.fr Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter =...

phpMyNewsletter 0.8b5 - msg_id SQL Injection

phpMyNewsletter 0.8b5 - msgid SQL Injection !/usr/bin/php Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter \n\n"; if$argc\n"; $url = $argv1; $c =...

phpMyNewsletter 0.8b5 - 'msg_id' SQL Injection

!/usr/bin/php Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter \n\n"; if$argc\n"; $url = $argv1; $c =...

CVE-2005-3996

SQL injection vulnerability in admin/passwordforgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the adminemail parameter...