CVE-2008-7152: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database SID, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 client.php or 2 taxonservice.php...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/plugins/OnlineUsers/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSPTConfigdirdata parameter...

PHP Dir Submit SQL Injection

====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site : http://www.phpdirsubmit.com » Founder: Mr.tro0oqy borken...

PHP Dir Submit (aid) Remote SQL Injection Vulnerability

No description provided by source. ====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site :...

CVE-2008-7067: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin/plugins/OnlineUsers/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSPTConfigdirdata parameter...

PHP Dir Submit - 'aid' SQL Injection

====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site : http://www.phpdirsubmit.com » Founder: Mr.tro0oqy bork...

PHP Dir Submit - aid SQL Injection

PHP Dir Submit - aid SQL Injection ====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site :...

Nwahy Dir 2.1 Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit

No description provided by source. ? / Nwahy Dir v2.1 Change Admin Password Exploit - Author : rEcruit - Mail : [email protected] - Download : http://nwahy.com/showdownload-3105.html - Vuln in ./admincp/admininfo.php code $u = addslashes$COOKIE'username'; $query = mysqlquery "SELECT FROM dliladmi...

Nwahy Dir 2.1 - Arbitrary Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

Campsite 'g_campsiteDir' Remote and Local File Inclusion Vulnerabilities

This host is running Campsite and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcampsitemultvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Campsite 'gcampsiteDir' Remote and Local File Inclusion Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

CVE-2008-6839: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

CVE-2009-2116: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a .. dot dot in the dir parameter...

Fedora 10 : gupnp-0.12.8-1.fc10 (2009-5861)

New upstream release that fixes a bug where the gupnp stack crashes when passed empty content ChangeLog here http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NE WS&id=ce714a6700ce03953a2886a66ec57db59205f4e6 Bug report here http://bugzilla.openedhand.com/showbug.cgi?id=1604 Other bugs fixed here. -...

CVE-2009-1701

Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash by destroying a...

CVE-2009-1787

Multiple SQL injection vulnerabilities in PHP Dir Submit aka WebsiteSubmitter and Submitter Script allow remote attackers to bypass authentication and gain administrative access via the 1 username and 2 password parameters...

Sql injection

Multiple SQL injection vulnerabilities in PHP Dir Submit aka WebsiteSubmitter and Submitter Script allow remote attackers to bypass authentication and gain administrative access via the 1 username and 2 password parameters...

CVE-2009-1787

Multiple SQL injection vulnerabilities in PHP Dir Submit aka WebsiteSubmitter and Submitter Script allow remote attackers to bypass authentication and gain administrative access via the 1 username and 2 password parameters...

CVE-2009-1787: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Dir Submit aka WebsiteSubmitter and Submitter Script allow remote attackers to bypass authentication and gain administrative access via the 1 username and 2 password parameters...

CVE-2009-1737: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directories via a .. dot dot in the dir parameter...