phplist version 2.8.11 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== phplist version 2.8.11 SQL Injection Vulnerability ==================================================...

phpList 2.8.11 - SQL Injection

phpList 2.8.11 - SQL Injection ----------------------------------------------------------------------------------------------------------------------- phplist version 2.8.11 SQL Injection Vulnerability http://www.phplist.com/...

CVE-2010-1078

CVE-2010-1078 concerns a SQL injection in SphereCMS 1.1 alpha (archive.php, view parameter) where encoded null bytes (%00) bypass a protection mechanism, enabling arbitrary SQL commands. Documentation across sources (NVD, CVE records, PRION/CVELIST mirrors) confirms the vulnerability in XlentProj...

CVE-2010-1078: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null bytes "%00" in the view parameter, which bypasses a protection mechanism...

Zomorrod Cms Sql Injection Vulnerability

Exploit for php platform in category web applications ======================================== Zomorrod Cms Sql Injection Vulnerability ======================================== Application Info: Name: Zomorrod Cms Vendor: http://www.zomorrod.net Vulnerability:...

CVE-2009-2101

Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when registerglobals is enabled, allows remote attackers to delete arbitrary files via a .. dot dot in the deleteTorrent parameter...

CVE-2009-2101

CVE-2009-2101 affects TorrentVolve 1.4, via archive.php: a directory traversal vulnerability that, when register_globals is enabled, allows remote attackers to delete arbitrary files using a .. in the deleteTorrent parameter. The issue is evidenced by NVD and OpenVAS records with a CVSS v2 base s...

CVE-2009-2101: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when registerglobals is enabled, allows remote attackers to delete arbitrary files via a .. dot dot in the deleteTorrent parameter...

TorrentVolve 1.4 - 'deleteTorrent' Delete Arbitrary File

---------------------------------------------------------------------------------------------------- Name : Torrent Volve Site : http://sourceforge.net/projects/torrentvolve/ Down : http://sourceforge.net/project/showfiles.php?groupid=179905&packageid=207933&releaseid=476030...

TorrentVolve 1.4 File Deletion

---------------------------------------------------------------------------------------------------- Name : Torrent Volve Site : http://sourceforge.net/projects/torrentvolve/ Down : http://sourceforge.net/project/showfiles.php?groupid=179905&packageid=207933&releaseid=476030...

TorrentVolve 1.4 - deleteTorrent Delete Arbitrary File

TorrentVolve 1.4 - deleteTorrent Delete Arbitrary File ---------------------------------------------------------------------------------------------------- Name : Torrent Volve Site : http://sourceforge.net/projects/torrentvolve/ Down :...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

CVE-2008-3186: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blog Blogger allow remote attackers to inject arbitrary web script or HTML via the membername parameter to 1 members.php, 2 comments.php, 3 photos.php, 4 archive.php, or 5 cat.php. NOTE: the provenance of this information is unknown; t...

Chipmunk Blog - 'archive.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

CVE-2008-2340

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 lang parameter to a advsearch.php, b archive.php, and c index.php, and the 2 pid parameter to d listtagitems.php...

CVE-2008-2340

CVE-2008-2340 affects News Manager 2.0 with multiple SQL injection vulnerabilities. Remote attackers can exploit the (1) lang parameter in advsearch.php, archive.php, and index.php, and the (2) pid parameter in list_tagitems.php to execute arbitrary SQL commands. The entry is documented with a hi...

CVE-2008-2340: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 lang parameter to a advsearch.php, b archive.php, and c index.php, and the 2 pid parameter to d listtagitems.php...

CVE-2008-0255

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2008-0255

CVE-2008-0255 affects iGaming archive.php vulnerable versions 1.5 and 1.3.1 and earlier. The root cause is an SQL injection via the section parameter, allowing remote attackers to execute arbitrary SQL commands. Impact per sources is partial confidentiality, integrity, and availability. The NVD e...

CVE-2008-0255: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter...