phpMySite (XSS/SQLi) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== phpMySite XSS/SQLi Multiple Remote Vulnerabilities ==================================================== ================================================================= phpMySite XSS/SQ...

phpMySite - Cross-Site Scripting / SQL Injection

================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software Link: http://www.phpmysite.com/ Version: N/A...

CVE-2008-6081

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6081

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6081

The CVE-2008-6081 entry describes an SQL injection vulnerability in Simple Customer 1.2, specifically in contact.php, where the id parameter can be manipulated by an attacker to execute arbitrary SQL commands. Affects Simple Customer 1.2 (contact.php) with user-controlled id input; impact per NVD...

Unfixed XSS vulnerability at www.cyreas.com

Security researcher PHPLizardo, has submitted on 07/08/2008 a cross-site-scripting XSS vulnerability affecting www.cyreas.com, which at the time of submission ranked 4171291 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is...

Unfixed XSS vulnerability at www.halfpintmusic.com

Security researcher mckt, has submitted on 20/06/2008 a cross-site-scripting XSS vulnerability affecting www.halfpintmusic.com, which at the time of submission ranked 3749688 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is...

CVE-2008-2690

Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the bcrmpubroot parameter to 1 kb.php, 2 login.php, 3 index.php, 4 contactview.php, and 5 contact.php in pub/, different...

Unfixed XSS vulnerability at www.michelberetti.net

Security researcher xylitol, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.michelberetti.net, which at the time of submission ranked 23393639 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/04/2010. It is...

CVE-2008-2394

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to contact.php and the 2 nid parameter to news.php...

CVE-2008-2394

CVE-2008-2394 affects TAGWORX.CMS 3.00.02. The vulnerability is described as multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the following parameters: (1) cid in contact.php and (2) nid in news.php. This is documented across multiple sources (NVD, CV...

CVE-2008-2394

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to contact.php and the 2 nid parameter to news.php...

TAGWORX.CMS Multiple Remote SQL Injection Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu TAGWORX.CMS Remote SQL Injection Vulnerability Script site: http://www.tagworx.net/ Vuln:...

tagworx-sql.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu TAGWORX.CMS Remote SQL Injection Vulnerability Script site: http://www.tagworx.net/ Vuln: -contact.php:...

TAGWORX.CMS Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= TAGWORX.CMS Multiple Remote SQL Injection Vulnerabilities ========================================================= :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$...

TAGWORX.CMS 3.00.02 - Multiple SQL Injections

TAGWORX.CMS 3.00.02 - Multiple SQL Injections :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu TAGWORX.CMS Remote SQL Injection Vulnerability Script site: http://www.tagworx.net/...

Simple Customer 1.2 (contact.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Simple Customer 1.2 contact.php id SQL Injection Vulnerability ================================================================...

sharelor-xss.txt

Sharelor file sender Cross site scripting ========================================= POST variable : http://www.fileflasher.com:80/contact.php?action=send with line below from="alert1248191921%3B malibu.r...

Crlf injection

CRLF injection vulnerability in contact.php in Moonware aka Dale Mooney Gallery allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers...

CVE-2007-4612

CRLF injection vulnerability in contact.php in Moonware aka Dale Mooney Gallery allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers...