CVE-2008-3302: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magicquotesgpc is disabled, allows remote authenticated administrators to execute arbitrary SQL commands via the num parameter...

eNews 0.1 (delete.php) Arbitrary Delete Post Vulnerability

No description provided by source. eNews 0.1 delete.php Arbitrary Delete Post Vulnerability Author: iLker Kandemir MEFISTO Script download : http://www.hotscripts.com/Detailed/81086.html script demo : http://emvvy.com/demos/enews/ site : www.dumenci.net...

eNews 0.1 - delete.php Arbitrary Delete Post

eNews 0.1 - delete.php Arbitrary Delete Post eNews 0.1 delete.php Arbitrary Delete Post Vulnerability Author: iLker Kandemir MEFISTO Script download : http://www.hotscripts.com/Detailed/81086.html script demo : http://emvvy.com/demos/enews/ site : www.dumenci.net...

eNews 0.1 - 'delete.php' Arbitrary Delete Post

eNews 0.1 delete.php Arbitrary Delete Post Vulnerability Author: iLker Kandemir MEFISTO Script download : http://www.hotscripts.com/Detailed/81086.html script demo : http://emvvy.com/demos/enews/ site : www.dumenci.net ---------------------------------------------------------------- //poc: if...

CVE-2008-1785

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

CVE-2008-1785

The CVE-2008-1785 issue affects Prozilla Top 100 1.2, where delete.php can be abused by remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter. Root cause appears to be parameter manipulation in delete.php, enabling unauthorized destructive acti...

CVE-2008-1785

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

CVE-2008-1785: Improper Input Validation

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

CVE-2007-4290

Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the scriptroot parameter to 1 delete.php, 2 edit.php, or 3 inc/common.inc.php; or 4 database.php, 5 entries.php, 6 index.php, 7 logout.php, or 8 settings.ph...

CVE-2007-1451: Undefined Security Weakness

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" cleanup.php and then "Suppression des fichiers d'installation" delete.php...

freeqboard-rfi.txt

freeqboard = 1.1 qbpath Remote File Include Vulnerability Author: Mr.3FReeT Softname: freeqboard code in : about.php , contact.php , delete.php , faq.php , index.php include "config.php"; include $qbpath."incs/mysql.php"; Exploit : """""""" www.site.com/path/index.php?qbpath=shellcode.txt?...

CVE-2006-5511: Undefined Security Weakness

Direct static code injection vulnerability in delete.php in JaxUltraBB JUBB 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter...

JaxUltraBB <= 2.0 (delete.php) Defaced Exploit

!/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

JaxUltraBB 2.0 - delete.php Remote Auto Deface

JaxUltraBB 2.0 - delete.php Remote Auto Deface !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+:...

JaxUltraBB <= 2.0 (delete.php) Remote Auto Deface Exploit

Exploit for unknown platform in category web applications ========================================================= JaxUltraBB = 2.0 delete.php Remote Auto Deface Exploit ========================================================= !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: :...

CVE-2006-4895: Undefined Security Weakness

IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php...

CVE-2006-4747

Multiple cross-site scripting XSS vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter in delete.php and 2 the error parameter in error.php...

CVE-2006-4747: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter in delete.php and 2 the error parameter in error.php...

TextAds - delete.php?id Cross-Site Scripting

TextAds - delete.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/19932/info TextAds is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...

CVE-2006-4666: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript aka WM-News 0.5 beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 ide parameter in a article.php; or the 2 pwfile parameter in b delete.php, c modify.php, d admin.php, or e modifygo.php...