69 matches found
CVE-2013-0738
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...
Design/Logic Flaw
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...
CVE-2013-0738
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...
CVE-2013-0738: Improper Neutralization of Input During Web Page Generation
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...
planethum.com XSS vulnerability
Open Bug Bounty ID: OBB-566348 Description| Value ---|--- Affected Website:| planethum.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Yellow Pages Clone Script 1.3.4 - SQL Injection
Exploit Title: Yellow Pages Clone Script v1.3.4 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/yellow-pages-clone-script/ Demo: http://dexteritysolution.com/demo/directory/ Version: 1.3.4 Tested on...
fuzzylime (cms) 3.01 'blog.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30121/info 'fuzzylime cms' is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary local script code. This can allo...
CVE-2012-6523: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via 1 the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter in 2 blog.php, 3 guestbook.php, or 4 forum.php in codes/. NOTE: some of these...
seoPLUSteam SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: seoPLUSteam SQL Injection Google Dork: "Developed by seoPLUSteam" & "blog.php?id=+seoPLUSteam" Date: 13/06/2012 Author: IranianDarkCodersTeam Site : http://idc-team.net/ Software Link: http://seoplusteam.com/ Version: Last SQL...
Bart`s CMS - SQL Injection Vulnerability
Document Title: =============== Barts CMS - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=390 Release Date: ============= 2012-01-23 Vulnerability Laboratory ID VL-ID: ==================================== 390 Product & Servi...
Pecio CMS 'template' Multiple Remote File Include Vulnerabilities
This host is running Pecio CMS and is prone to multiple remote file inclusion vulnerabilities. OpenVAS Vulnerability Test $Id: gbpeciocmsmultrfivuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Pecio CMS 'template' Multiple Remote File Include Vulnerabilities Authors: Madhuri D Copyright: Copyright c...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 post.php, 2 article.php, 3 blog.php, or 4 home.php in pectemplates/nova-blue/...
Sql injection
Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...
CVE-2010-0458: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...
CVE-2009-4580
Multiple cross-site scripting XSS vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 yorumyaz.php and 2 blog.php...
CVE-2009-4580: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 yorumyaz.php and 2 blog.php...
CVE-2008-6111
The CVE-2008-6111 entry concerns a SQL injection in NetArt Media Vlog System 1.1, exploitable via the note parameter in blog.php. Affected component: blog.php within NetArt Media Vlog System 1.1. Root cause: unsanitized input leading to arbitrary SQL execution. Impact per NVD: partial confidentia...
CVE-2008-6111: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL commands via the note parameter...