Yellow Pages Clone Script 1.3.4 - SQL Injection

Exploit Title: Yellow Pages Clone Script v1.3.4 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/yellow-pages-clone-script/ Demo: http://dexteritysolution.com/demo/directory/ Version: 1.3.4 Tested on...

fuzzylime (cms) 3.01 'blog.php' Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30121/info 'fuzzylime cms' is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary local script code. This can allo...

seoPLUSteam SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: seoPLUSteam SQL Injection Google Dork: "Developed by seoPLUSteam" & "blog.php?id=+seoPLUSteam" Date: 13/06/2012 Author: IranianDarkCodersTeam Site : http://idc-team.net/ Software Link: http://seoplusteam.com/ Version: Last SQL...

Bart`s CMS - SQL Injection Vulnerability

Document Title: =============== Barts CMS - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=390 Release Date: ============= 2012-01-23 Vulnerability Laboratory ID VL-ID: ==================================== 390 Product & Servi...

Pecio CMS 'template' Multiple Remote File Include Vulnerabilities

This host is running Pecio CMS and is prone to multiple remote file inclusion vulnerabilities. OpenVAS Vulnerability Test $Id: gbpeciocmsmultrfivuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Pecio CMS 'template' Multiple Remote File Include Vulnerabilities Authors: Madhuri D Copyright: Copyright c...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 post.php, 2 article.php, 3 blog.php, or 4 home.php in pectemplates/nova-blue/...

Sql injection

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...

CVE-2009-4580

Multiple cross-site scripting XSS vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 yorumyaz.php and 2 blog.php...

CVE-2008-6111

The CVE-2008-6111 entry concerns a SQL injection in NetArt Media Vlog System 1.1, exploitable via the note parameter in blog.php. Affected component: blog.php within NetArt Media Vlog System 1.1. Root cause: unsanitized input leading to arbitrary SQL execution. Impact per NVD: partial confidentia...

CVE-2009-0400

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

Sql injection

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

CVE-2009-0400

CVE-2009-0400 is an SQL injection in SocialEngine’s Blog Plugin (blog.php) via the category_id parameter. The vulnerability affects SocialEngine 3.06 trial and allows an unauthenticated remote attacker to manipulate database queries, potentially leading to sensitive information disclosure or data...

Social Engine (category_id) SQL Injection Vulnerability

No description provided by source. ================================================================================================================== = SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM = = S N N N A A K K E S T E A A M M M M = + SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE...

CVE-2008-5733

The CVE-2008-5733 entry concerns the Team Impact TI Blog System mod for PHP-Fusion. Affected component: blog.php. The vulnerability is a SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause is unsafely handled input in the id parameter. Impac...

Vlog System 1.1 - SQL Injection

Vlog System 1.1 - SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability Vlog System V1.1 blog.php user AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

Vlog System 1.1 (blog.php user) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Vlog System 1.1 blog.php user Remote SQL Injection Vulnerability ================================================================== Viva IslaM Viva IslaM Remote SQL injecti...

Vlog System 1.1 (blog.php user) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL injection Vulnerability Vlog System V1.1 blog.php user AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/blog.php?user= REAL USER NAME HERE...

CVE-2008-3164

CVE-2008-3164 affects fuzzylime (cms) 3.01 (and 3.01a) with a directory traversal condition in blog.php. When magic_quotes_gpc is disabled, an attacker can supply a .. in the file parameter to cause the application to include and execute arbitrary local files. The vulnerability impact is remote c...

mgbs-sql.txt

MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUERY BROKEN"; ... Admin hash exploit...

Mooseguy Blog System 1.0 (blog.php month) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Mooseguy Blog System 1.0 blog.php month SQL Injection Vulnerability ===================================================================== MGBS 1.0 Remote SQL injection...