ezContents CMS 2.0.3 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== ezContents CMS 2.0.3 Multiple Local File Inclusion Vulnerabilities ================================================================== Digital Security Research Group DSecRG...

EZContents CMS 2.0.3 - Multiple Local File Inclusions

EZContents CMS 2.0.3 - Multiple Local File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits:...

Pluck CMS 4.5.2 - Multiple Local File Inclusions

Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date of Public Advisory: 25.08.2008...

miacms-sql.txt

MiaCMS SourceCtrl+F3 ... onclick="window.open'http://digg.com/submit?phase=3&url='+encodeURIComponentlocation.href+'&bodytext=This+site+uses+MiaCMS+-+the+free%2C+open+source+content+management+system+admin%3A21232f297a57a5a743894a0e4a801fc3& admin:21232f297a57a5a743894a0e4a801fc3...

phpcart-xss.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE -r45c4l -Bond...

5 star review - Cross-Site Scripting SQL Injection

5 star review - Cross-Site Scripting SQL Injection Viva IslaM Viva IslaM XSS / Remote SQL Injection Five Star Review recommend.php itemid http://review-script.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploites :- User Exploit...

CVE-2008-3748

creationtimestamp| type| source ---|---|--- 2008-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6277 2009-12-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10597...

[DSECRG-08-036] Multiple Security Vulnerabilities in Freeway eCommerce 1.4.1.171

Digital Security Research Group DSecRG Advisory DSECRG-08-036 Application: Freeway eCommerce Versions Affected: 1.4.1.171 Vendor URL: http://www.openfreeway.org/ Bugs: RFI, Multiple LFI, XSS Exploits: YES Reported: 27.06.2008 Second report: 04.07.2008 Vendor response: 06.07.2008 Solution: YES Dat...

CVE-2008-3770

creationtimestamp| type| source ---|---|--- 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32259 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32268 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32266 2008-08-18...

CVE-2008-6517

creationtimestamp| type| source ---|---|--- 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32271...

CVE-2008-3733

creationtimestamp| type| source ---|---|--- 2008-08-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6253 2009-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8176...

Meet#Web 0.8 - 'RegRightsResource.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

CVE-2008-4321

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6240 2008-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6248 2008-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6256 2026-06-28...

CVE-2008-6066

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32231 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32235 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32236 2008-08-13...

MS08-041: Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

The remote host contains a version of the ActiveX control for the Snapshot Viewer for Microsoft Access which is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit it. C Tenable...

CVE-2008-3679

creationtimestamp| type| source ---|---|--- 2008-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32230 2009-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10495...

Microsoft Outlook Express And Windows Mail MHTML Handler Information Disclosure Vulnerability

Description Microsoft Outlook Express And Windows Mail are prone to an information-disclosure vulnerability because of an error in the Windows MHTML protocol handler. Note that an attacker can exploit this issue via Internet Explorer because the browser internally uses the vulnerable component of...

Gallery 1.5.7, 1.6-alpha3 (phpEx) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-035 Application: Gallery Versions Affected: 1.5.7, 1.6-alpha3 Vendor URL: http://gallery.menalto.com/ Bug: Local File Include Exploits: YES Reported: 14.07.2008 Vendor response: 15.07.2008 Solution: YES...

CVE-2008-4423

creationtimestamp| type| source ---|---|--- 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6232 2013-08-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27771...

CVE-2008-4426

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6215 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6231 2009-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8105...