8799 matches found
CVE-2007-6566
CVE-2007-6566 describes an SQL injection in post.php of XZero Community Classifieds 4.95.11 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php. The NVD entry lists a CVSS v2 base score of 7.5 (High). No exploitation det...
CVE-2007-6568
CVE-2007-6568 describes a PHP remote file inclusion vulnerability in the config.inc.php file of XZero Community Classifieds 4.95.11 and earlier . The issue allows remote attackers to execute arbitrary PHP code via a URL supplied in the path_escape parameter. The NVD metrics indicate a base score ...
CVE-2007-6567
CVE-2007-6567 affects XZero Community Classifieds up to version 4.95.11. The vulnerability resides in the script index.php where a directory traversal can be triggered via a pagename parameter in a page view action, allowing an attacker to include and execute arbitrary local files. This can impac...
CVE-2007-6567
Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter in a page view action...
CVE-2007-6566
SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php...
xzero-rfi.txt
XZero Community Classifieds = v4.95.11 Remote File Inclusion linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar cod3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstzone.org we have in config.inc.php: line303:...
XZero Community Classifieds <= 4.95.11 LFI / SQL Injection
No description provided by source. !/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar original thread:...
XZero Community Classifieds <= 4.95.11 Remote File Inclusion Vuln
No description provided by source. XZero Community Classifieds = v4.95.11 Remote File Inclusion linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar cod3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstzone.org we have in...
XZero Community Classifieds <= v4.95.11 LFI & SQL Injection
!/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar http://en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst cod3d and f0unded by Kw3rLn from Romanian...
XZero Community Classifieds <= 4.95.11 LFI / SQL Injection
Exploit for unknown platform in category web applications ========================================================== XZero Community Classifieds = 4.95.11 LFI / SQL Injection ========================================================== !/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL...
XZero Community Classifieds 4.95.11 - Local File Inclusion SQL Injection
XZero Community Classifieds 4.95.11 - Local File Inclusion SQL Injection !/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar original thread:...
XZero Community Classifieds <= 4.95.11 Remote File Inclusion Vuln
Exploit for unknown platform in category web applications ================================================================= XZero Community Classifieds = 4.95.11 Remote File Inclusion Vuln ================================================================= XZero Community Classifieds = v4.95.11...
XZero Community Classifieds 4.95.11 - Local File Inclusion / SQL Injection
!/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar original thread: http://en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst cod3d and f0unded by Kw3rLn...
XZero Community Classifieds <= 4.95.11 LFI / SQL Injection
No description provided by source. !/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar original thread:...
XZero Community Classifieds 4.95.11 - Remote File Inclusion
XZero Community Classifieds 4.95.11 - Remote File Inclusion XZero Community Classifieds = v4.95.11 Remote File Inclusion linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar cod3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstzone.o...
XZero Community Classifieds 4.95.11 - Remote File Inclusion
XZero Community Classifieds = v4.95.11 Remote File Inclusion linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar cod3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstzone.org we have in config.inc.php: line303:...
MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities
The version of MySQL Server installed on the remote host reportedly is affected by the following issues : - It is possible, by creating a partitioned table using the DATA DIRECTORY and INDEX DIRECTORY options, to gain privileges on other tables having the same name as the partitioned table. Bug...
MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities
Binary data 4313.prm...
Design/Logic Flaw
MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system...
exoops-sql.txt
E-xoops multiple variable/scripts SQL injection vendor url: http://www.e-xoops.com Advisore: http://lostmon.blogspot.com/2007/12/ e-xoops-multiple-variablescripts-sql.html vendor notify:NO exploits available: YES E-xoops is content-community management system written in PHP-MySQL. E-xoops contain...