CVE-2010-5037

SenseSites CommonSense CMS is affected by a SQL injection flaw in article.php via the article_id parameter. The underlying issue is unsanitized input allowing arbitrary SQL execution. This vulnerability is documented with CVSSv2 base score 7.5 (HIGH) and network attack vector with low complexity ...

CVE-2010-5037: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

PHP-Nuke article.php SQL Injection

Coded By : darkTR - CodeHunters http://www.1337day.com/exploits/16550 Demo : http://www.moravanszky.com/article.php?sid=24 Site adresini açýklý kýsým olarak girin www.site.com/article.php?sid=24 þeklinde import re, time, urllib2 hedef = rawinput"Site adiniz giriniz:" sorgu =...

SiteGenius - Blind SQL Injection

SiteGenius - Blind SQL Injection ===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author : AutoRUN & dR.sqL Ho...

SiteGenius Blind SQL injection Vulnerability

Exploit for php platform in category web applications ===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author ...

Prefix Technologies SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Limelight Software (article.php) SQL Injection Vulnerability

Exploit for php platform in category web applications © Limelight Software Ltd article.php Sql Injection Vulnerability .:. Author : eXeSoul .:. Contact : email protected .:. Date : 04-03-2011 .:. category : Web Apps SQli .:. HomePage : www.indishell.in .:. Tested on : windows/linux .:...

Limelight Software - article.php SQL Injection

Limelight Software - article.php SQL Injection © Limelight Software Ltd article.php Sql Injection Vulnerability .:. Author : eXeSoul .:. Contact : [email protected] .:. Date : 04-03-2011 .:. category : Web Apps SQli .:. HomePage : www.indishell.in .:. Tested on : windows/linux .:. Vulnerability :...

Limelight Software Ltd SQL Injection

© Limelight Software Ltd article.php Sql Injection Vulnerability .:. Author : eXeSoul .:. Contact : [email protected] .:. Date : 04-03-2011 .:. category : Web Apps SQli .:. HomePage : www.indishell.in .:. Tested on : windows/linux .:. Vulnerability : PHP Sql Injection Vunerability .:. Vendor :...

Limelight Software - 'article.php' SQL Injection

© Limelight Software Ltd article.php Sql Injection Vulnerability .:. Author : eXeSoul .:. Contact : [email protected] .:. Date : 04-03-2011 .:. category : Web Apps SQli .:. HomePage : www.indishell.in .:. Tested on : windows/linux .:. Vulnerability : PHP Sql Injection Vunerability .:. Vendor :...

Atarim CMS SQL Injection

In The Name Of GOD + Exploit Title: Atarim CMS SQL Injection Vulnerability + Date: 2010-11-11 + Author : Cru3l.b0y + Software Link: http://www.atarim.co.il/ + Tested on: Ubuntu 10.10 + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad, ... + Fuck Israeil...

Unfixed XSS vulnerability at sting.spsu.edu

Security researcher CalloGsK2, has submitted on 10/05/2010 a cross-site-scripting XSS vulnerability affecting sting.spsu.edu, which at the time of submission ranked 14641203 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Pecio CMS 'template' Multiple Remote File Include Vulnerabilities

This host is running Pecio CMS and is prone to multiple remote file inclusion vulnerabilities. OpenVAS Vulnerability Test $Id: gbpeciocmsmultrfivuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Pecio CMS 'template' Multiple Remote File Include Vulnerabilities Authors: Madhuri D Copyright: Copyright c...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 post.php, 2 article.php, 3 blog.php, or 4 home.php in pectemplates/nova-blue/...

XOOPS 2.0.14 - 'article.php' SQL Injection

/ \ / | | | \ / | | | | | | | | | | || | | | | | | | | '| | | | | | | | | | |/ \ / |/ / / | | | | || | || | || || | / || | | | / | | || / / |/ || ,|\|,| +-+-+-+-+ |C|r|e|w| +-+-+-+-+ XOOPS 2.0.14 article.php SQL Injection Vulnerability Discovered By 0iZy5 http://r00tDefaced.com &...

Web Design Noida SQL Injection

============================================== Web Design Noida SQL Injection Vulnerability ============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || Web Design Noida SQL Injection Vulnerability Vendor:...

Atarim Design SQL Injection

============================================== atarim Design SQL Injection Vulnerability ============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || atarim Design SQL Injection Vulnerability Vendor:...

atarim Design SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= atarim Design SQL Injection Vulnerability ========================================= .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || atarim Design...

CVE-2009-4904

The CVE-2009-4904 issue affects the oBlog platform where article.php does not properly restrict comments, enabling remote attackers to trigger a denial of service (blog spam) through a comment=new action. The description does not specify affected versions or exact code root cause beyond insuffici...

CVE-2009-4908: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HTML via the 1 commentName, 2 commentEmail, 3 commentWeb, or 4 commentText parameter to article.php; and allow remote authenticated administrators to inject arbitrary web script or...