Ecshop the latest version v. 2 7 2 Local include vulnerability Oday-vulnerability warning-the black bar safety net

“js/calendar.php”: the $lang = ! empty$GET'lang' ? trim$GET'lang' : 'EN';//no filter, obviously contains a vulnerability if ! fileexists'../languages/' . $lang . '/calendar.php' $lang = 'EN'; requiredirnamedirnameFILE . '/data/config.php'; header'Content-type: application/x-javascript; charset='...

ExtCalendar 2 SQL Injection

Title : ExtCalendar 2 calendar.php SQL Injection Vulnerability Author : Lagripe-Dz Product: ExtCalendar 2 Download : http://sourceforge.net/projects/extcal/ Date: 10/01/2011 Dork : inurl:calendar.php?mode=cat ================================================================ -== ExPloiT ==-...

Extcalendar 2 - calendar.php SQL Injection

Extcalendar 2 - calendar.php SQL Injection Title : ExtCalendar 2 calendar.php SQL Injection Vulnerability Author : Lagripe-Dz Product: ExtCalendar 2 Download : http://sourceforge.net/projects/extcal/ Date: 10/01/2011 Dork : inurl:calendar.php?mode=cat...

Extcalendar 2 - 'calendar.php' SQL Injection

Title : ExtCalendar 2 calendar.php SQL Injection Vulnerability Author : Lagripe-Dz Product: ExtCalendar 2 Download : http://sourceforge.net/projects/extcal/ Date: 10/01/2011 Dork : inurl:calendar.php?mode=cat ================================================================ -== ExPloiT ==-...

ExtCalendar 2 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== ExtCalendar 2 Blind SQL Injection Vulnerability =============================================== ========================================================== Date: 30/07/2010 Author : Lagripe-Dz...

PBBooking 1.0.4_3 Joomla Component Multiple Blind SQL Injection

PBBooking 1.0.43 Joomla Component Multiple Blind SQL Injection Name PBBooking Vendor http://sourceforge.net/projects/pbbooking/ Versions Affected 1.0.43 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-29 X. INDEX ...

Cross-site Scripting (XSS) Vulnerabilities in CruxPA

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CruxPA which could be exploited to perform cross-site scripting and script insertion attacks. 1 Cross-site scripting XSS vulnerability in CruxPA: CVE-2010-2718 The vulnerability exists due to input sanitation err...

724CMS Enterprise 4.59 SQL Injection

Exploit Title: 724CMS Enterprise Version 4.59 Multiple SQL Injections Date: 11-5-10 Author: t@nzo0n Version: 4.59 Enterprise Code : section.php x Variable : Lang x Exploit : http://target.com/section.php?Nav=Section&ID=5&Lang=sqlinjection index.php x Variable : autoslide x Exploit :...

Sql injection

Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to view.php and the 2 a parameter in an event action to calendar.php, reachable through index.php...

CVE-2009-4794

Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to view.php and the 2 a parameter in an event action to calendar.php, reachable through index.php...

vBulletin 2.3.x - SQL Injection

vBulletin 2.3.x - SQL Injection Title: vbulletin Vulnerability versions 2.3 . - SQL injection. Author: Discovered by ROOTEGY Version: vBulletin Version 2.3 =========================================================== www.sec-war.com ===========================================================...

vBulletin v 2.3 .* SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================== vBulletin v 2.3 . SQL Injection Vulnerability ============================================== Title: vbulletin Vulnerability versions 2.3 . - SQL injection. Author: Discovered by ROOTEGY Versio...

vBulletin 2.3.x - SQL Injection

Title: vbulletin Vulnerability versions 2.3 . - SQL injection. Author: Discovered by ROOTEGY Version: vBulletin Version 2.3 =========================================================== www.sec-war.com =========================================================== Vulnerability versions 2.3 . - SQL...

Bitrix Site Manager Remote File Inclusion

Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old bugs, but i just write this exploit under perl module...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathToIndex parameter to 1 Calendar.php, 2 Comment.php, 3 Rss.php and 4 Trackback.php in lib/Loggix/Module/; and 5...

Loggix Project <= 9.4.5 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. In The Name Of Allah Loggix Project = 9.4.5 Multiple Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/loggix/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA Blog :...

Loggix Project <= 9.4.5 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Loggix Project = 9.4.5 Multiple Remote File Inclusion Vulnerabilities ====================================================================== In The Name Of Allah Loggix...

Loggix Project 9.4.5 - Multiple Remote File Inclusions

In The Name Of Allah Loggix Project = 9.4.5 Multiple Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/loggix/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA Blog : http://sh3ll4u.blogspot.com Dork : No DoRk f0R ScRipT...

CVE-2009-3148

Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 calendar.php, 2 news.php, and 3 links.php; and the 4 assignmentid parameter to assignments.php...

CVE-2009-3148

PortalXP Teacher Edition 1.2 is affected by multiple SQL injection vulnerabilities. The issue allows remote attackers to inject arbitrary SQL via the id parameter to calendar.php, news.php, and links.php, and via the assignment_id parameter to assignments.php. These details are consistently descr...