E-PHP CMS - article.php SQL Injection

E-PHP CMS - article.php SQL Injection E-Php Content Management System HaCkerEgy ; Contact : [email protected] Home : pal-hacker.com & atsdp.com =============================================== Script : E-Php Content Management System Download : http://www.ephpscripts.com...

E-Php CMS (article.php es_id) Remote SQL Injection Vulnerability

No description provided by source. || | | E-Php CMS esid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-TY.CoM | www.tryag.cc | | email: darkangelg85atYahoo815com | | | | | | | | script : http://www.ephpscripts.c...

Unfixed XSS vulnerability at www.e-personal.ru

Security researcher THEMILLER, has submitted on 22/06/2008 a cross-site-scripting XSS vulnerability affecting www.e-personal.ru, which at the time of submission ranked 381038 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

CVE-2008-2094: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6134

SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the contentid parameter in an article action to include.php, a different vector than CVE-2006-1773...

CVE-2007-6134: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the contentid parameter in an article action to include.php, a different vector than CVE-2006-1773...

PHPKIT 1.6.4pl1 article.php Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== PHPKIT 1.6.4pl1 article.php Remote SQL Injection Exploit ======================================================== !/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t...

PHPKIT 1.6.4pl1 - article.php SQL Injection

PHPKIT 1.6.4pl1 - article.php SQL Injection !/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t shadowleet Contact: [email protected] Phpkit 1.6.4pl1 Non Public Exploit by $hadowleet, Description: Vulnerability in file pkinc/public/article.php On line 71:...

PHPKIT 1.6.4pl1 - 'article.php' SQL Injection

!/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t shadowleet Contact: [email protected] Phpkit 1.6.4pl1 Non Public Exploit by $hadowleet, Description: Vulnerability in file pkinc/public/article.php On line 71: $contentid=!$contentid && isset$REQUEST'contentid' &&...

CVE-2007-4952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...

CVE-2007-4332: Undefined Security Weakness

SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titulo parameter in article.php...

CVE-2007-3291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titulo parameter in article.php...

phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit

No description provided by source. !-- phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploit Vulnerable Variable: itemid Vulnerable File: modules/news/article.php Vulnerable: phpMySpace Gold v8.10 other versions should also be vulnerable Google d0rk: "Powered by phpMySpace Gold 8.10" John...

CVE-2007-2247: Undefined Security Weakness

SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-1965

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...

CVE-2007-1965: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...

CVE-2006-5917: Undefined Security Weakness

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

Newsscript <= 0.5 Remote and Local File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= Newsscript 2 3 27 include$filename; The second flaw is due to an input validation error in the "article.php" script that does not validate the "ide" parameter, which could be...

CVE-2006-4666: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript aka WM-News 0.5 beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 ide parameter in a article.php; or the 2 pwfile parameter in b delete.php, c modify.php, d admin.php, or e modifygo.php...