Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

CVE-2010-3206

DiY-CMS 1.0 is vulnerable to multiple remote file inclusion (RFI) flaws. The issues arise from unvalidated user input in three vectors: (1) lang parameter to modules/guestbook/blocks/control.block.php, (2) main_module parameter to index.php, and (3) getFile parameter to includes/general.functions...

Schaf-CMS 1.0 - SQL Injection

Schaf-CMS 1.0 - SQL Injection Schaf-CMS 1.0 SQL Injection Vulnerability Author : Manas58 Homepage : http://www.1923turk.com Script : Schaf-CMS 1.0 Download : http://www.brothersoft.com/site-builder-software---cms-53489.html Vulnerable File cms.php?id= SQL XpL...

Schaf-CMS 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= Schaf-CMS 1.0 SQL Injection Vulnerability ========================================= Author : Manas58 Homepage : http://www.1923turk.com Script : Schaf-CMS 1.0 Download :...

MyNews CMS 1.0 - SQL Injection / Local File Inclusion / Cross-Site Scripting

MyNews v1.0 CMS - Sql Injection, local file inclusion and XSS Vulnerabilities Found by: mrme - http://net-ninja.net/ Advisory: http://www.corelan.be:8800/advisories.php?id=10-040 Dork: "Corelan Security Team" Homepage: http://mynews.magtrb.com/ Download:...

Commercial CMS 1.0 Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

CopyWrite CMS 1.0 Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

DS CMS 1.0 (NewsId) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== DS CMS 1.0 NewsId Remote SQL Injection Vulnerability ====================================================== Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site :...

DS CMS 1.0 - NewsId SQL Injection

DS CMS 1.0 - NewsId SQL Injection Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit...

DS CMS 1.0 - 'NewsId' SQL Injection

Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit +++++++++++++++++++++++...

JM CMS 1.0 SQL Injection

1337h4x0rZ //Rd / / / \ \ ============================================================================== ? Note : Hacker R0x Lamerz Sux ! ============================================================================== ? JM CMS 1.0 == 1.0 Auth Bypass SQL Injection Vulnerability...

JM CMS 1.0 <== 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. 1337h4x0rZ //Rd / / / \ \ |/ / /\ | \ /\ || \ /\ | \ | | \ / / / / | / | | / / d0tcom/@\ | O / /+\ ||O| /0O\ | \ | | \ \ \ \ | \ | | / / /||\ | \ /|||| O | /++| ^ \ | | / \ /\ / ||\ ||/ \ /| |/||\ |//| |/\|...

JM CMS 1.0 - Authentication Bypass

JM CMS 1.0 - Authentication Bypass 1337h4x0rZ //Rd / / / \ \ ============================================================================== ? Note : Hacker R0x Lamerz Sux ! ============================================================================== ? JM CMS 1.0 == 1.0 Auth Bypass SQL Injection...

JM CMS 1.0 <= 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== JM CMS 1.0 = 1.0 Auth Bypass SQL Injection Vulnerability ===========================================================...

JM CMS 1.0 - Authentication Bypass

1337h4x0rZ //Rd / / / \ \ ============================================================================== ? Note : Hacker R0x Lamerz Sux ! ============================================================================== ? JM CMS 1.0 == 1.0 Auth Bypass SQL Injection Vulnerability...

DesigNsbyjm CMS 1.0 SQL Injection

=========================================================================== === » Note : Hacker R0x Lamerz Sux ! =========================================================================== === » DesigNsbyjm Cms == 1.0 PageId Remote SQL Injection Vulnerability...

CVE-2009-4315

CVE-2009-4315 : Directory traversal vulnerability in Nuggetz CMS 1.0 (admin/ajaxsave.php) allows remote attackers to create or modify arbitrary files via a .. payload in the nugget parameter and a modified pagevalue parameter, leading to execution of arbitrary PHP code by accessing a created .php...

Nuggetz CMS 1.0 Code Execution

Remote Code Execution in Nuggetz CMS 1.0 Name Remote Code Execution in Nuggetz CMS Systems Affected Nuggetz CMS 1.0 site http://www.nuggetz.co.uk/ Author Amol Naik amolnaik4atgmail.com Date 10/12/2009 OVERVIEW Nuggetz CMS 1.0 is vulnerable to Remote Code Execution. Technical Details Vulnerable...

Remote Code Execution in Nuggetz CMS 1.0

No description provided by source. Remote Code Execution in Nuggetz CMS 1.0 Name Remote Code Execution in Nuggetz CMS Systems Affected Nuggetz CMS 1.0 site http://www.nuggetz.co.uk/ Author Amol Naik amolnaik4atgmail.com Date 10/12/2009 OVERVIEW Nuggetz CMS 1.0 is vulnerable to Remote Code...

Nuggetz CMS 1.0 - Remote Code Execution

Remote Code Execution in Nuggetz CMS 1.0 Name Remote Code Execution in Nuggetz CMS Systems Affected Nuggetz CMS 1.0 site http://www.nuggetz.co.uk/ Author Amol Naik amolnaik4atgmail.com Date 10/12/2009 OVERVIEW Nuggetz CMS 1.0 is vulnerable to Remote Code Execution. Technical Details Vulnerable...