162 matches found
Abarcar Florist Shop System SQL Injection
abarcar Florist Shop System Script content.php cat Blind/Remote Sql inj script: http://www.abarcar.com/content18.php ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 31.12.2008 Home: www.z0rlu.blogspot.com / www.experl.com N0T:...
1024 CMS <= 1.4.4 Multiple Remote/Local File Inclusion Vulnerabilities
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-027 Application: 1024 CMS Versions Affected: 1.4.3, 1.4.4 RFC Vendor URL: http://www.1024cms.com/...
CVE-2007-4602: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS Micro-CMS 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Unfixed XSS vulnerability at www.pulp.co.nz
Security researcher Narcoticxs, has submitted on 30/08/2007 a cross-site-scripting XSS vulnerability affecting www.pulp.co.nz, which at the time of submission ranked 1564276 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is...
Unfixed XSS vulnerability at www.highyieldliving.com
Security researcher Narcoticxs, has submitted on 30/08/2007 a cross-site-scripting XSS vulnerability affecting www.highyieldliving.com, which at the time of submission ranked 3019558 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. I...
Micro CMS 3.5 (revert-content.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Micro CMS 3.5 revert-content.php Remote SQL Injection Vulnerability ===================================================================== not sec group Micro CMS 3.5...
Micro CMS 3.5 - 'revert-content.php' SQL Injection
not sec group http://www.notsec.com [email protected] Micro CMS 3.5 Class: SQL Injection Found: 28/08/2007 Remote: Yes Site: http://www.impliedbydesign.com/ibd-micro-cms-static-content-manager.html Download: http://www.impliedbydesign.com/apps/microcms/microcms.zip Demo site:...
WSPortal Content.PHP SQL注入漏洞
WSPortal是一款基于PHP的WEB应用程序。 WSPortal不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Content.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 WSPortal WSPortal 1.0 目前没有解决方案提供： http://www.wsportal.co.uk/ http://www.example.com/WSPORTAL-DIRECTORY/content.php?page=0' UNI...
CVE-2007-3128
SQL injection vulnerability in content.php in WSPortal 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter...
Sql injection
SQL injection vulnerability in content.php in WSPortal 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2007-3127: Undefined Security Weakness
content.php in WSPortal 1.0, when magicquotesgpc is disabled, allows remote attackers to obtain sensitive information via a "';" quote semicolon sequence in the page parameter, which reveals the installation path in the resulting forced SQL error message...
CVE-2007-3128: Undefined Security Weakness
SQL injection vulnerability in content.php in WSPortal 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter...
WSPortal 1.0 - 'content.php' SQL Injection
source: https://www.securityfocus.com/bid/24513/info WSPortal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...
Pie Cart Pro => (Home_Path) Remote File Inclusion Exploit
==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...
CVE-2006-4860
CVE-2006-4860 concerns Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311, with multiple vulnerabilities in 12 PHP/HTML files (index.php, minixml.inc.php, doc.inc.php, element.inc.php, node.inc.php, treecomp.inc.php, forum.html.php, forum.php, antihack.php, content.php, initglobals.php, imanager....
Pie Cart Pro (Home_Path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================== Pie Cart Pro HomePath Remote File Include Vulnerability ==========================================================...
Pie Cart Pro (Home_Path) Remote File Include Vulnerability
No description provided by source. ==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com...
CVE-2006-4860: Undefined Security Weakness
Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...
Pie Cart Pro - Home_Path Remote File Inclusion
Pie Cart Pro - HomePath Remote File Inclusion ==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz...
Pie Cart Pro - 'Home_Path' Remote File Inclusion
==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...