CVE-2009-0750

SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6360

Cross-site scripting XSS vulnerability in the userranks feature in modules/system/admin.php in ImpressCMS 1.0.2 final allows remote attackers to inject arbitrary web script or HTML via the ranktitle parameter. NOTE: some of these details are obtained from third party information...

i-dreams Mailer 1.2 Final (admin.dat) File Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: i-dreams Mailer Version : 1.2 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl:...

i-dreams Mailer 1.2 Final (admin.dat) File Disclosure Vulnerability

Exploit for cgi platform in category web applications =================================================================== i-dreams Mailer 1.2 Final admin.dat File Disclosure Vulnerability ===================================================================...

i-dreams Mailer 1.2 Final - admin.dat File Disclosure

i-dreams Mailer 1.2 Final - admin.dat File Disclosure --------------------------------------------------------- Portal Name: i-dreams Mailer Version : 1.2 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir ---------------------------------------------------------...

i-dreams GB 5.4 Final (admin.dat) File Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: i-dreams.net GB Version : 5.4 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl:...

i-dreams GB 5.4 Final - 'admin.dat' File Disclosure

--------------------------------------------------------- Portal Name: i-dreams.net GB Version : 5.4 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl: http://site.com/firebook/data/admdat/admin.dat...

i-dreams GB 5.4 Final (admin.dat) File Disclosure Vulnerability

Exploit for cgi platform in category web applications =============================================================== i-dreams GB 5.4 Final admin.dat File Disclosure Vulnerability ===============================================================...

i-dreams GB 5.4 Final Info Disclosure

--------------------------------------------------------- Portal Name: i-dreams GB Version : 5.4 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl: http://site.com/firebook/data/admdat/admin.dat...

i-dreams GB 5.4 Final - admin.dat File Disclosure

i-dreams GB 5.4 Final - admin.dat File Disclosure --------------------------------------------------------- Portal Name: i-dreams.net GB Version : 5.4 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl:...

i-dreams Mailer 1.2 Final - 'admin.dat' File Disclosure

--------------------------------------------------------- Portal Name: i-dreams Mailer Version : 1.2 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl: http://site.com/cgi-bin/budmail/data/admin.dat...

Surat Diamond Blind SQL Injection

Blind sql injection found at URL: http://www.suratdiamond.com/prodcriteria.aspx Entity: matid Security Risk: It is possible to view, modify or delete database entries and tables Below are the tables found on the database admin uid username userpass 1 admin removed brochureimage Carat CartMaster...

CuteNews aj-fork - 'path' Remote File Inclusion

source: https://www.securityfocus.com/bid/32141/info CuteNews aj-fork is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in t...

LoveCMS 1.6.2 Final Arbitrary File Delete Vulnerability

Exploit for unknown platform in category web applications ======================================================= LoveCMS 1.6.2 Final Arbitrary File Delete Vulnerability =======================================================...

DEBIAN-CVE-2008-4640

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which 1 a final "z" character is replaced by a "t" character or 2 a final "t" character is replaced by a "z" character...

CVE-2008-3595

PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary PHP code via a URL in the CFGtxtsqlclass parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary PHP code via a URL in the CFGtxtsqlclass parameter...

CVE-2008-3595

txtSQL 2.2 Final is affected by a PHP remote file inclusion in examples/txtSQLAdmin/startup.php. The vulnerability allows an attacker to supply a URL for CFG[txtsql][class], enabling execution of arbitrary PHP code. This CVE (CVE-2008-3595) is rated HIGH (CVSS 2.0 base score 9.3) by NVD. The conn...

CVE-2008-3595

PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary PHP code via a URL in the CFGtxtsqlclass parameter...

txtSQL 2.2 Final - startup.php Remote File Inclusion

txtSQL 2.2 Final - startup.php Remote File Inclusion ??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The...