708 matches found
XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or...
XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== XOOPS module Articles \n"; print "Examp: $0 www.victim.com /path 1\n"; print...
CVE-2006-7052
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles dotwidgeta 0.2 allow remote attackers to execute arbitrary code via a URL in the 1 filepath parameter to a index.php, b showcatpicks.php, and c showarticle.php; and the 2 adminheaderfile and 3 adminfooterfile parameters ...
CVE-2006-7052
The CVE-2006-7052 entry affects DotWidget For Articles (dotwidgeta) version 0.2, where multiple PHP remote file inclusion vulnerabilities exist. An attacker can trigger arbitrary code execution by supplying a URL path in the file_path parameter for index.php, showcatpicks.php, and showarticle.php...
CVE-2006-7052
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles dotwidgeta 0.2 allow remote attackers to execute arbitrary code via a URL in the 1 filepath parameter to a index.php, b showcatpicks.php, and c showarticle.php; and the 2 adminheaderfile and 3 adminfooterfile parameters ...
PHP-Nuke Block-Old_Articles.PHP SQL注入漏洞
PHP-Nuke是一款基于PHP的站点构架程序。 PHP-Nuke不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Block-OldArticles.PHP'脚本对用户提交的'cat'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 PHP-Nuke 7.9 PHP-Nuke 7.8 PHP-Nuke 7.7 PHP-Nuke 7.6 PHP-Nuke 7.5 PHP-Nuke 7.4 PHP-Nuke 7.3 PHP-Nuke 7.2 PHP-Nuke 7.1 PHP-Nuke 7.0 目前没有解决方案提供：...
PHP-Nuke <= 7.9 Old-Articles Block "cat" SQL Injection vulnerability
/ -------------------------------------------------------- Neo Security Team NST - Advisory 31 - 2007-01-13 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke = 7.9 Risk: Medium Impact: Medium Risk -==PHP-Nuke ...
CVE-2006-6925
Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...
Interview:w00w00
w00w00 One of the first to respond to a request for an interview was w00w00 pronounced "woo-woo", their website . A group highly respected among those who are interested in security issues - they have discovered a lot of holes in security systems, many interesting tactics of hacker attacks. The...
eggblog=> 3.1.0 Cross Site Scripting
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM eggblog=...
CVE-2006-4969
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...
CVE-2006-4891
SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...
CVE-2006-4891
SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...
Pie Cart Pro - 'Inc_Dir' Remote File Inclusion
==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...
Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== Pie Cart Pro IncDir Remote File Include Vulnerabilities ==========================================================...
Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities
No description provided by source. ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...
Techno Dreams Articles&Papers Package <=v2.0(ArticlesTableview.asp) Remote SQL Injection Vulnerability
Vulnerability Report Title : Techno Dreams Articles&Papers Package =v2.0ArticlesTableview.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.t-dreams.com Exploit; http://target/path/ArticlesTableview.asp?key='SQL HERE Example:...
Techno Dreams Articles & Papers 2.0 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Techno Dreams Articles & Papers 2.0 Remote SQL Injection Vulnerability ====================================================================== Title : Articles&Papers...
Techno Dreams Articles & Papers 2.0 Remote SQL Injection Vulnerability
No description provided by source. Title : Articles&Papers Package =v2.0ArticlesTableview.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.t-dreams.com Exploit; http://target/path/ArticlesTableview.asp?key='SQL HERE Example:...
PT-2006-5327 · Yet Another Community System · Yacs Cms
Name of the Vulnerable Software and Affected Versions: Yet Another Community System YACS CMS versions 6.6.1 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the contextpath to root parameter. This affects the articles/article.php...