Sql injection

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to 1 profiles/index.php and 2 profiles/admin.php...

CVE-2008-5070

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to 1 profiles/index.php and 2 profiles/admin.php...

PHPX news_id SQL Injection Vulnerability (Nov 2008)

PHPX is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5000

CVE-2008-5000 is an SQL injection vulnerability in PHPX 3.5.16, exploitable when magic_quotes_gpc is disabled. The flaw resides in admin/includes/news.inc.php, allowing remote attackers to inject arbitrary SQL via the news_id parameter (uppercase input). Multiple sources reference this PHPX issue...

CVE-2008-4995

redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default...

CVE-2008-4897

SQL injection vulnerability in fichiers/addurl.php in Logz podcast CMS 1.3.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the art parameter...

CVE-2008-4877

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

Broken Web Server Detection

The remote web server seems password protected or misconfigured. Further tests on it will be disabled so that the whole scan is not slowed down. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34474; scriptversion"$Revision: 1.20 $"; scriptcvsdate"$Date: 2016/02/26...

CVE-2008-4626

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4626

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4632

Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magicquotesgpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. dot dot in the 1 post and 2 doc parameters...

CVE-2008-4483

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

LanSuite 3.3.2 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LanSuite 3.3.2 fckeditor Arbitrary File Upload + + + + By: Stack +...

CVE-2008-4082

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php...

GeekLog 1.5.0 - Arbitrary File Upload

GeekLog 1.5.0 - Arbitrary File Upload !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

Directory traversal

Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mods parameter. NOTE: the provenance of this information is unknown; the details...

Sql injection

SQL injection vulnerability in s03.php in Powergap Shopsystem, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the ag parameter...

CVE-2008-3562

CVE-2008-3562 describes a directory traversal vulnerability in the Contact module of Chupix CMS 0.1.0 . When magic_quotes_gpc is disabled, remote attackers can cause arbitrary local file inclusion/execution by using a ".." path traversal via the mods parameter in index.php. The vulnerability’s im...

CVE-2008-3165

Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...

Sql injection

SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showid parameter...