293 matches found
MOC Designs PHP News 1.1 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== MOC Designs PHP News 1.1 Auth Bypass SQL Injection Vulnerability ================================================================== + MOC Designs PHP News v1.1 Auth Bypass...
MOC Designs PHP News 1.1 - Authentication Bypass
MOC Designs PHP News v1.1 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://www.mocdesigns.com/ + SQL Injection Auth Bypass - PoC http://127.0.0.1/news/login.php User : 'or''=' Password : 'or''=' - Live Demo...
Flatchat Version Detection
This script detects the installed version of Flatchat. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Improper access control
admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory...
Directory traversal
Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...
CVE-2009-0570
Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...
CVE-2009-0571
The CVE-2009-0571 entry affects Ninja Designs Mailist 3.0. The admin.php component stores backup copies of maillist.php under the web root with insufficient access control, allowing remote attackers to obtain sensitive information via a direct request to the backup directory. The provided documen...
CVE-2009-0570
The CVE-2009-0570 entry describes a Directory traversal vulnerability in Ninja Designs Mailist 3.0 (send.php) that is exploitable when PHP register_globals is enabled and magic_quotes_gpc is disabled. An attacker can use a .. path in the load parameter to include and execute arbitrary local files...
CVE-2009-0571
admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory...
Ninja Blog 4.8 - Cross-Site Request ForgeryHTML Injection
Ninja Blog 4.8 - Cross-Site Request ForgeryHTML Injection Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of...
e107 Plugin EasyShop (category_id) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ------------------------------------------------------------ e107 Plugin EasyShop Remote Blind SQL Injection Exploit By StAkeRathotmaildotit Dork allinurl: e107plugins/easyshop/easyshop.php Example http://www.clan-designs.co.uk...
1024 CMS多个文件包含漏洞
BUGTRAQ ID: 30091 1024是基于PHP和MySQL的内容管理系统。 1024 CMS中存在多个文件包含漏洞，允许恶意用户泄露敏感信息或入侵有漏洞的系统。 1...
GL-SH Deaf Forum <= 6.5.5 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= GL-SH Deaf Forum = 6.5.5 Multiple Remote Vulnerabilities ========================================================= AmnPardaz Security Research Team Title: GL-SH Deaf Forum =6.5.5...
GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities
GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: GL-SH Deaf Forum =6.5.5 Multiple Vulnerabilities Vendor: www.frank-karau.de Vulnerable Version: 6.5.5 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...
Unfixed XSS vulnerability at www.ballarddesigns.com
Security researcher holisticinfosec, has submitted on 19/02/2008 a cross-site-scripting XSS vulnerability affecting www.ballarddesigns.com, which at the time of submission ranked 70040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/02/2008...
PK-Designs PKs Movie Database 3.0.3 - Cross-Site Scripting / SQL Injection
------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix From H-T Team = Script : PKs Movie Database version 3.0.3 = Original advisory :...
CVE-2007-2643
The CVE-2007-2643 issue affects phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0. The vulnerability is a directory traversal flaw triggered by a .. in the src parameter, allowing remote attackers to read arbitrary files. The available data does not specify affected versions beyond the prod...
CVE-2007-2643
Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the src parameter...
Directory traversal
Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. dot dot in the item parameter...