976 matches found
e107 0.7.5 Subject field HTML injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18560/info The e107 CMS is prone to an HTML-injection vulnerability. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site whe...
PHP 4.x/5.0.x File Upload GLOBAL Variable Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15250/info PHP is prone to a vulnerability that allows attackers to overwrite the GLOBAL variable via HTTP POST requests. By exploiting this issue, remote attackers may be able to overwrite the GLOBAL variable. This may...
E107 Website System 0.6 Attached File Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14495/info e107 Website System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
e107 Website System 0.617 Forum_viewforum.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13576/info e107 Website System is prone to an SQL injection vulnerability. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other...
e107 0.7.23 - SQL Injection Vulnerability.
No description provided by source. Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 20...
e107 Website System 0.555 DB.PHP Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8273/info e107 Website System 'db.php' has been reported prone to an information disclosure vulnerability. A remote attacker may exploit this vulnerability to invoke the dumpsql routine without prior authentication...
e107 website system 0.6 "email article to a friend" Feature XSS
No description provided by source. source: http://www.securityfocus.com/bid/10436/info e107 is prone to multiple cross-site scripting, HTML injection, file inclusion, and SQL injection vulnerabilities. This may compromise various security properties of a Web site running the software, including...
e107 website system 0.6 usersettings.php avmsg Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10436/info e107 is prone to multiple cross-site scripting, HTML injection, file inclusion, and SQL injection vulnerabilities. This may compromise various security properties of a Web site running the software, including...
e107 Advanced Medal System Plugin - SQL Injection Vulnerability
No description provided by source. Exploit Title: Advanced Medal System SQL Injection Google Dork: inurl:advmedsysview.php Date: 6/18/13 Exploit Author: Life Wasted and Caspa Vendor Homepage: http://e107.org/e107plugins/psilo/list.php?mode=plugin&id=699 Software Link:...
e107 <= 0.7.8 - (photograph) Arbitrary File Upload Vulnerability
No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title e107 = 0.7.8 - Arbitrary File Upload Description e107 is a content management system written in PHP and using the...
e107 0.7.5 Search.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18508/info e107 is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script co...
e107 1.0.1 - CSRF Resulting in Arbitrary Javascript Execution
No description provided by source. Exploit Title: e107 v1.0.1 Administrator CSRF Resulting in Arbitrary Javascript Execution Google Dork: intext:This site is powered by e107 Date: 01/01/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://e107.org Software Link:...
e107 <= 0.617 - XSS Remote Cookie Disclosure Exploit
No description provided by source. / 1 Change milw0rm.com to your domain.com 2 Post the below code into a new message. Credits to Nick Griffin. /str0ke /...
e107 0.7.x 'CAPTCHA' Security Bypass Vulnerability and Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/36532/info e107 is prone to a security-bypass vulnerability and multiple cross-site scripting vulnerabilities. Successfully exploiting the security-bypass issue will allow an attacker to bypass the 'CAPTCHA' security...
E107 Website System 0.7.2 Chatbox Plugin HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16719/info The e107 content management system CMS Chatbox Plugin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in...
e107 Plugin BLOG Engine 2.2 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl e107 Plugin BLOG Engine v2.2 Blind SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz m...
e107 <= 0.75 - (e107language_e107cookie) Local File Include Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
e107 <= 0.7.15 - (extended_user_fields) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/env perl e107 = 0.7.15 extendeduserfields Blind SQL Injection Exploit Description ------------------------------------------------------------------- e107 contains one flaw that allows an attacker to carry out an SQL injection attack. The issue is due ...
e107 <= 0.6172 - (resetcore.php) Remote SQL Injection Exploit
No description provided by source. ?php 0.27 18/10/2005 ---e017xpl.php e107 0.617 resetcore.php SQL Injection & remote code execution all-in-one by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = on...
jbShop - e107 7 CMS Plugin - SQL Injection
No description provided by source. Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability Author: Robert Cooper adminatwebsiteauditing.org Software Link: http://sourceforge.net/projects/jbshop/ Tested on: Linux/Windows 7 Vulnerable Parameter: itemid= PoC:...