Sql injection

SQL injection vulnerability in the Flat Manager flatmgr extension before 2.7.10 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6233

SQL injection vulnerability in the Flat Manager flatmgr extension before 2.7.10 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6233

The CVE CVE-2014-6233 affects the TYPO3 Flat Manager (flatmgr) extension, prior to version 2.7.10. The vulnerability is an SQL Injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially affecting the database state and confidentiality/integrity/a...

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29662/info Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks. An attacker can exploit these issues to gain unauthorized access to the...

PHP-Board 1.0 User Password Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6862/info php-board user information is stored in flat files on the system hosting the software. Access to the files via the web is not sufficiently restricted. Remote attackers may request user files and gain access to...

phpvidz 0.9.5 Administrative Credentials Disclosure

No description provided by source. Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://sourceforge.net/projects/phpvidz/ phpvidz does not use a SQL database. Instead it uses a system of flat files to maintain applicati...

Pritlog <= 0.4 (filename) Remote File Disclosure Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found...

Flat Chat 2.0 (include online.txt) Remote Code Execution Vulnerability

No description provided by source. .--. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8|-\IIIIII/-| / \ / @ ++ + + + +=============================================+ + | | + | Portal : Flat Chat | + | Version : 2.0 | +...

Flat Calendar 1.1 'add.php' HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34688/info Flat Calendar is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

ReloadCMS <= 1.2.5 Cross Site Scripting / Remote Code Execution Exploit

No description provided by source. ?php / ReloadCMS = 1.2.5stable Cross site scripting / remote command execution software site: http://reloadcms.com/ description: ReloadCMS is a free CMS written on PHP and based on flat files. vulnerability: ReloadCMS do not properly sanitize User-Agent request...

Feindura File Manager 1.0(rc) - Remote File Upload

No description provided by source. =================================================== Feindura File Manager 1.0rc - Remote File Upload =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : Feindura - Flat File Content...

gpEasy CMS - XSS Vulnerability

gpEasy CMS, http://www.gpeasy.com/ Easy to use True WYSIWYG Editing. Flat-file data storage and advanced resource management for fast websites. 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /'...

sflog! 1.00 LFI / Password Disclosure / Shell Upload

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-07-05 sflog! // 1 ..cut.. 53 requireonce"./includes/entries.inc.php"; // 4 ..cut.. File: ./sflog/includes/pageHeader.inc.ph...

sflog! 1.00 - Multiple Vulnerabilities

sflog! 1.00 - Multiple Vulnerabilities :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-07-05 sflog! // 1 ..cut.. 53 requireonce"./includes/entries.inc.php"; // 4 ..cut...

PHP Flat File Guestbook Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Rfi PHP Flat File Guestbook Date: 11-08-2011 Author: RiRes Walid Vendor or Software Link: http://www.advancebydesign.com Version: 1.0 Google dork: Tested on: Xp sp2 ------------------------------------------------------------...

PHP Flat File Guestbook 1.0 - ffgb_admin.php Remote File Inclusion

PHP Flat File Guestbook 1.0 - ffgbadmin.php Remote File Inclusion source: https://www.securityfocus.com/bid/49138/info PHP Flat File Guestbook is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker...

PHP Flat File Guestbook 1.0 - 'ffgb_admin.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/49138/info PHP Flat File Guestbook is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

PHPvidz Administrative Credentials Disclosure Vulnerability

This host is running PHPvidz and is prone to administrative credentials disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbphpvidzinfodiscvuln.nasl 5794 2017-03-30 13:52:29Z cfi $ PHPvidz Administrative Credentials Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010...

phpvidz 0.9.5 Administrative Credentials Disclosure

Exploit for php platform in category web applications =================================================== phpvidz 0.9.5 Administrative Credentials Disclosure =================================================== Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative...

phpvidz 0.9.5 - Administrative Credentials Disclosure

Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://sourceforge.net/projects/phpvidz/ phpvidz does not use a SQL database. Instead it uses a system of flat files to maintain application state. The administrative passwo...