CVE-2010-0696: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos JwallVideos plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ modified dot dot in the file parameter...

Joomla (Jw_allVideos) Remote File Download Vulnerability

Securitylab.ir Application Info: Name: Joomla jwallvideos Plugin Version: 1.0 Vulnerability Info: Type: Remote File Download Risk: Medium Vulnerability: http://site.com/plugins/content/jwallvideos/includes/download.php?file=./../.../file.php Discoverd By: Pouya Daneshmand Website:...

Sql injection

SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...

CVE-2009-4624

SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...

CVE-2009-4624

CVE-2009-4624 affects Nicecoder iDesk via a SQL injection in download.php that is exploitable through the cat_id parameter. The vulnerability is in the application layer where user-supplied cat_id can cause arbitrary SQL execution, with impact described as arbitrary SQL commands being run by an a...

CVE-2009-4624: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...

phpbb 1.2.4RC3 download.php 远程文件包含漏洞

No description provided by source...

iDesk download.php cat_id SQL Injection Vulnerability

iDesk download.php catid SQL Injection Vulnerability. CVE-2009-4624. Webapps exploit for php platform SQL Injection Vulnerability download.php catid iDesk AuTh0r : Manas58 H0ME : www.1923turk.biz Exploit...

iDesk (download.php cat_id) SQL Injection Vulnerability

No description provided by source. SQL Injection Vulnerability download.php catid iDesk AuTh0r : Manas58 H0ME : www.1923turk.biz Exploit download.php?catid=3+UNION+SELECT+0,0,0,0,concatws0x3a,username,password,lastlogin,0,0,0,0+from+ideskuser-- http://www.site.com/download.php?catid=sql DEMO...

iDesk (download.php cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= iDesk download.php catid SQL Injection Vulnerability ======================================================= SQL Injection Vulnerability download.php catid iDesk Exploit...

ISPworker Download.PHP Multiple Directory Traversal Vulnerabilities

ISPworker is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to obtain sensitive information that could aid in further attacks. These issues affect ISPworker 1.21 and 1.23; other...

ISPworker <= 1.23 Remote File Disclosure exploit

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker = 1.23 Remote File Disclosure exploit Download Script : http://www.ispware.de/files/ispworker-1.23.tar.gz Dork : die"lamers attempt"; :P Vuln : ./ispworker-1.23/files/ispworker/module/ticket/download.php...

phpCMS 2008 - 'download.php' Information Disclosure

source: https://www.securityfocus.com/bid/42514/info PHPCMS2008 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may allow the...

iDesk (download.php cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== iDesk download.php catid Remote SQL Injection Vulnerability ============================================================== Remote SQL Injection Vulnerability download.php catid...

iDesk SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability download.php catid iDesk http://www.nicecoder.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :- www.TraGeT.CoM/download.php?catid=-1+UNION+SELECT+0,0,0,@@VERSION,0,0,0,0,0-- -:: !Gr3E3E3E3E3E3E3TzZ! ::- ::...

iDesk - 'download.php?cat_id' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability download.php catid iDesk http://www.nicecoder.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :- www.TraGeT.CoM/download.php?catid=-1+UNION+SELECT+0,0,0,@@VERSION,0,0,0,0,0-- -:: !Gr3E3E3E3E3E3E3TzZ! ::- ::...

CVE-2009-3040

Multiple SQL injection vulnerabilities in Open Computer and Software OCS Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the 1 N, 2 DL, 3 O and 4 V parameters to download.php and the 5 SYSTEMID parameter to groupshow.php...

Sql injection

Multiple SQL injection vulnerabilities in Open Computer and Software OCS Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the 1 N, 2 DL, 3 O and 4 V parameters to download.php and the 5 SYSTEMID parameter to groupshow.php...

UBUNTU-CVE-2009-3040

Multiple SQL injection vulnerabilities in Open Computer and Software OCS Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the 1 N, 2 DL, 3 O and 4 V parameters to download.php and the 5 SYSTEMID parameter to groupshow.php...

CVE-2009-3040: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Open Computer and Software OCS Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the 1 N, 2 DL, 3 O and 4 V parameters to download.php and the 5 SYSTEMID parameter to groupshow.php...