CVE-2017-7579

inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field...

CVE-2017-7579: Improper Neutralization of Input During Web Page Generation

inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field...

user.govoutreach.com XSS vulnerability

Vulnerable URL: https://user.govoutreach.com/boulder/faq.php?cid=23864'"--!confirmOPENBUGBOUNTY...

dynamicbrain.in XSS vulnerability

Vulnerable URL: http://www.dynamicbrain.in/faq.php?coursename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

vBulletin(R) 3.8.6 faq.php Information Disclosure Vulnerability

No description provided by source. 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 0 0 010101010101010101010101010101010101010101010101010101010 Original Advisory:...

free QBoard 1.1 faq.php qb_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/18780/info Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows the attacker to execute arbitrary...

RadScripts RadBids Gold 2.0 - faq.php farea Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A...

webSPELL <= 4.01.02 Multiple Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print \n \'/ ; print \n -.- ; print \n -------------------oOO------OOo--------------------; print \n | webSPELL = v4.01.02 Multiple Remote SQL Injection |; print \n | coded by DNX |; print \n...

Cyber CMS 'faq.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39698/info Cyber CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

NPDS 4.8 /5.0 faq.php categories Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may...

VBulletin <= 3.7.1 - admincp/faq.php Injection adminlog.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/30134/info vBulletin is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

MyPHP Forum <= 3.0 (Final) Multiple SQL Injection Vulnerabilities

No description provided by source. Name : MyPHP Forum = 3.0 Final Multiple Remote SQL Injection Vulnerability Author : x0kster Email : [email protected] Site : ihteam.net Script Download : http://www.myphp.ws/ Date : 31/12/2007 Dork : Powered by: MyPHP Forum Note: For work, magicquotesgpc must be...

vBulletin 3.x <= 4.2.0 FAQ (Echo config) trick

By using this codes, you can echo config.php information, such as host, username and password. Go to acp, Faq Manager and then edit a FAQ, add the following code: $vbulletin-config'MasterServer''servername' $vbulletin-config'MasterServer''username' $vbulletin-config'MasterServer''password'...

US Creations Web Services CMS Cross Site Scripting

Exploit Title: US Creations Web Services CMS Cross Site Scripting Google Dork: "Powered By: US Creations Web Services" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.us-creations.com/ Version: All Version Category:: webapps Tested...

Websolutions SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

CVE-2010-4558: Improper Control of Generation of Code

phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification Trojan Horse in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code...

FAQMasterFlex 1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= FAQMasterFlex 1.2 SQL Injection Vulnerability ============================================= Author: cyb3r.anbu Software Link: http://www.lethalpenguin.net/design/faqmasterflex.php Version: 1.2 Test...

FAQMasterFlex 1.2 - SQL Injection

FAQMasterFlex 1.2 - SQL Injection Hi guys, I just found a sqli bug on FAQMasterFlex. Since the software used as one of Fantastico auto-install software package in F.A.Q software section. Author: cyb3r.anbu Software Link: http://www.lethalpenguin.net/design/faqmasterflex.php Version: 1.2 Tested on...

Cross-site Request Forgery (CSRF) Vulnerabilities in Amiro.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amiro.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Amiro.CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

MyPHP Forum SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected system: MyPHP. ws MyPHP Forum v3. 0 Final Description: BUGTRAQ ID: 2 7 1 1 8 MyPHP Forum is an easy to erect and easy to use based on MySQL with PHP Forum. MyPHP Forum process user requests data when there is an input validation vulnerability, a remote attacker could exploit this...