Mambo Site Server 4.0.14 contact.php Unauthorized Mail Relay

No description provided by source. source: http://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous...

CVE-2014-3786: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the contact module admin/modules/contact.php in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via the 1 uemail or 2 subject parameter in the Contact form to contact/...

Portal Web Services CRLF Injection / XSS

Exploit Title: Portal Web Services Cms CRLF injection + Cross Site Scripting Vulnerability + Exploit Author: Ashiyane Digital Security Team + Home : www.Ashiyane.org + Vendor Homepage: www.portalwebservices.com + Tested on: Windows 7 + Dork: intext:"Powered By : Portal Web Services"...

ITHorizon SQL Injection

Exploit Title: ITHorizon lang SQL Injection Vulnerability Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : Powered by ITHorizon Script Page : http://www.ithorizon.net/ Exploit http://127.0.0.1/PATH/contact.php?lang=1' SQL http://127.0.0.1/PATH/contact.php?lang=1 union select...

ITHorizon (lang) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: ITHorizon lang SQL Injection Vulnerability Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : Powered by ITHorizon Script Page : http://www.ithorizon.net/ Exploit http://127.0.0.1/PATH/contact.php?lang=1' SQL...

PT-2011-1973

Name of the Vulnerable Software and Affected Versions Groone's Simple Contact Form affected versions not specified Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter in the contact/contact.php file. Recommendations For Groone's Simple...

CVE-2010-5038: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

BlueFire Creative SQL Injection

By : CR9 Greetz : Perspicacious Hackers In The World . ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : BlueFire Creative SQL Injection Vulnerability Vendor : http://bluefirecreative.com Author : CR9 Home : Http://Nopotm.ir Archive : Http://Nopotm.ir/forums Email :...

CVE-2010-4500

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 subject, and 4 message parameters in a sendmess action. NOTE: the provenance of this...

Sql injection

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 subject, and 4 message parameters in a sendmess action. NOTE: the provenance of this...

CVE-2010-4500: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 subject, and 4 message parameters in a sendmess action. NOTE: the provenance of this...

PT-2010-5505

Name of the Vulnerable Software and Affected Versions MRCGIGUY MCG FreeTicket version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands via the name, email, subject, and message parameters in a "sendmess" action when magic quotes gpc is disabled. Recommendation...

Sql injection

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...

CVE-2010-4363

The CVE-2010-4363 entry concerns MRCGIGUY (MCG) FreeTicket 1.0.0. The vulnerability is a SQL injection in contact.php exposed via the showtickets action, exploitable through the id and email parameters when magic_quotes_gpc is disabled. This allows remote attackers to execute arbitrary SQL comman...

CVE-2010-4363

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...

CVE-2010-4363: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...

PT-2010-5440

Name of the Vulnerable Software and Affected Versions MRCGIGUY MCG FreeTicket version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands due to multiple SQL injection vulnerabilities in the contact.php file. This occurs when the magic quotes gpc setting is...

Sql injection

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...

CVE-2010-2133

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...

CVE-2010-2133

The provided documents establish a concrete SQL injection vulnerability in My Little Forum related to contact.php via the id parameter (a vector different from CVE-2007-2942). Affected software is My Little Forum, with reference to user.php in 1.7 and earlier for the related CVE-2007-2942. The ro...