96 matches found
CVE-2008-6725
CVE-2008-6725 describes multiple SQL injection vulnerabilities in CMScout 2.06. The affected components are the mythings page (mythings.php) and the admin users page (admin.php), where the vulnerable input is the id parameter. The issue allows remote authenticated users to run arbitrary SQL comma...
CVE-2008-6726: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in CMScout 2.06, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the bit parameter to 1 admin.php and 2 index.php, different vectors than CVE-2008-3415...
CVE-2008-6725: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 index.php in a mythings page mythings.php and 2 the users page in admin.php...
CMScout 2.06 SQL Injection/Local File Inclusion Vulnerabilities
No description provided by source. + CMScout 2.06 Remote SQL Injection/Local File Inclusion + Discovered By SirGod + Visit : www.mortal-team.org + Visit : www.h4cky0u.org + Greetz : All my friends + Script homepage : http://www.cmscout.co.za/ + Dork : Powered by CMScout c2005 CMScout Group + Remo...
CMScout 2.06 SQL Injection / Local File Inclusion
CMScout 2.06 Remote SQL Injection/Local File Inclusion + Discovered By SirGod + Visit : www.mortal-team.org + Visit : www.h4cky0u.org + Greetz : All my friends + Script homepage : http://www.cmscout.co.za/ + Dork : Powered by CMScout c2005 CMScout Group + Remote SQL Injection...
CMScout 2.06 SQL Injection/Local File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications =============================================================== CMScout 2.06 SQL Injection/Local File Inclusion Vulnerabilities =============================================================== + CMScout 2.06 Remote SQL Injection/Local File...
CMScout 2.06 - SQL Injection Local File Inclusion
CMScout 2.06 - SQL Injection Local File Inclusion + CMScout 2.06 Remote SQL Injection/Local File Inclusion + Discovered By SirGod + Visit : www.mortal-team.org + Visit : www.h4cky0u.org + Greetz : All my friends + Script homepage : http://www.cmscout.co.za/ + Dork : Powered by CMScout c2005 CMSco...
CMScout 2.06 - SQL Injection / Local File Inclusion
CMScout 2.06 Remote SQL Injection/Local File Inclusion + Discovered By SirGod + Visit : www.mortal-team.org + Visit : www.h4cky0u.org + Greetz : All my friends + Script homepage : http://www.cmscout.co.za/ + Dork : Powered by CMScout c2005 CMScout Group + Remote SQL Injection...
Directory traversal
Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit parameter, as demonstrated by an upload to avatar/ of a .jpg file containing PHP...
CVE-2008-3415
Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit parameter, as demonstrated by an upload to avatar/ of a .jpg file containing PHP...
CVE-2008-3415
Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit parameter, as demonstrated by an upload to avatar/ of a .jpg file containing PHP...
CVE-2008-3415
CVE-2008-3415 affects CMScout 2.05 (and related listings reference CMScout 2.06). The vulnerability is a directory traversal in common.php when .htaccess is not supported, allowing remote attackers to include and execute arbitrary local files through crafted directory traversal sequences in the b...
CVE-2008-3415: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit parameter, as demonstrated by an upload to avatar/ of a .jpg file containing PHP...
cmscount-lfi.txt
CMScout 2.05 LFI AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.cmscout.co.za DORK : "Powered by CMScout ©2005 CMScout Group" Lfi http://Example/common.php?bit=file.type%00 Note : You can mi...
CMScout 2.05 (common.php bit) Local File Inclusion Vulnerability
No description provided by source. CMScout 2.05 LFI AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.cmscout.co.za DORK : "Powered by CMScout 2005 CMScout Group" Lfi http...
CMScout 2.05 - bit Local File Inclusion
CMScout 2.05 - bit Local File Inclusion CMScout 2.05 LFI AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.cmscout.co.za DORK : "Powered by CMScout ©2005 CMScout Group" Lfi...
CMScout 2.05 (common.php bit) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ CMScout 2.05 common.php bit Local File Inclusion Vulnerability ================================================================ CMScout 2.05 LFI AUTHOR : IRCRASH R3d.W0rm...
CMScout 2.05 - 'bit' Local File Inclusion
CMScout 2.05 LFI AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.cmscout.co.za DORK : "Powered by CMScout ©2005 CMScout Group" Lfi http://Example/common.php?bit=file.type%00...
Sql injection
SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php...