EUVD-2020-0337

Malware in sbrugna...

Sql injection

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

CVE-2019-11518

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

CVE-2019-11518

CVE-2019-11518 affects SEMCMS 3.8 with a SQL injection in SEMCMS_Inquiry.php due to incomplete protection in class.phpmailer.php inject_check_sql. The root cause is an incomplete safeguard allowing AID[] manipulation to inject SQL. CVSS metrics (NVD) list a v3 base score 7.2 (HIGH), network attac...

CVE-2019-11518: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

CVE-2015-8476: Improper Input Validation

Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an 1 email address to the validateAddress function in class.phpmailer.php or 2 SMTP command to the sendCommand function in class.smtp.php, a different...

PHP-Fusion Remote Command Execution Vulnerability

No description provided by source. Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script:...

CVE-2012-0796: Improper Control of Generation of Code

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted 1 From: or 2 Sender: header...

MachForm 2.4 Remote File Inclusion

=============================== MachForm.v2.4 RFI Vulnerability =============================== Vendor: http://canopus.oron.com/i755lr7evek7np4dpndrvbqcqhs3uj4igorbmlhaqwglgek3qc2old7whll7z4mlrtcyk73t/MachForm.v2.4.PHP.NULL-DGT.zip Date: 2012-1-27 Author : indoushka Exploit By indoushka...

CVE-2010-4914: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arbitrary PHP code via a URL in the langpath parameter...

Esvon Classifieds 4.0 Command Execution / Remote File Inclusion

1 1 0 I'm Sn!pEr.S!Te Hacker member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 ------------------------------------------------------------------------------ Remote Command Execution Vulnerability and Remote File Inclusion Vulnerability...

PHP-Fusion - Remote Command Execution

Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script: http://www.phpfusion-ar.com/downloads.php?catid=1&downloadid=91...

PHP-Fusion Remote Command Execution Vulnerability

Exploit for php platform in category web applications ================================================= PHP-Fusion Remote Command Execution Vulnerability ================================================= Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViR...

PHP-Fusion - Remote Command Execution

PHP-Fusion - Remote Command Execution Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script:...

CVE-2007-3215

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php...

CVE-2007-3215: Undefined Security Weakness

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php...

CVE-2007-3215

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php...

CVE-2007-2255

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 engdir parameter to addmember.php, 2 langpath parameter to admin/enginelib/class.phpmailer.php, and the 3 spawroot parameter to...

Remot File Include In Script Lore v1

By Hasadya Raed Contact : [email protected] Greetz : Brotha Mohammed Zeed --------------------------- Script : Lore v1 Download : http://www.pineappletechnologies.com Dork : Pineapple Technologies 2003-2005 c --------------------------- B.Files : class.phpmailer.php function.htmlcheckboxes.php...

Maian Recipe 1.0 (path_to_folder) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== Maian Recipe 1.0 pathtofolder Remote File Include Vulnerability =================================================================== Found by Denven Google Dork: "Powered b...