gpEasy CMS - XSS Vulnerability

gpEasy CMS, http://www.gpeasy.com/ Easy to use True WYSIWYG Editing. Flat-file data storage and advanced resource management for fast websites. 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /'...

sflog! 1.00 - Multiple Vulnerabilities

sflog! 1.00 - Multiple Vulnerabilities :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-07-05 sflog! // 1 ..cut.. 53 requireonce"./includes/entries.inc.php"; // 4 ..cut...

sflog! 1.00 LFI / Password Disclosure / Shell Upload

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-07-05 sflog! // 1 ..cut.. 53 requireonce"./includes/entries.inc.php"; // 4 ..cut.. File: ./sflog/includes/pageHeader.inc.ph...

PHP Flat File Guestbook 1.0 - ffgb_admin.php Remote File Inclusion

PHP Flat File Guestbook 1.0 - ffgbadmin.php Remote File Inclusion source: https://www.securityfocus.com/bid/49138/info PHP Flat File Guestbook is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker...

PHP Flat File Guestbook Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Rfi PHP Flat File Guestbook Date: 11-08-2011 Author: RiRes Walid Vendor or Software Link: http://www.advancebydesign.com Version: 1.0 Google dork: Tested on: Xp sp2 ------------------------------------------------------------...

PHP Flat File Guestbook 1.0 - 'ffgb_admin.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/49138/info PHP Flat File Guestbook is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

PHPvidz Administrative Credentials Disclosure Vulnerability

This host is running PHPvidz and is prone to administrative credentials disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbphpvidzinfodiscvuln.nasl 5794 2017-03-30 13:52:29Z cfi $ PHPvidz Administrative Credentials Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010...

phpvidz 0.9.5 Administrative Credentials Disclosure

Exploit for php platform in category web applications =================================================== phpvidz 0.9.5 Administrative Credentials Disclosure =================================================== Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative...

phpvidz 0.9.5 - Administrative Credentials Disclosure

Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://sourceforge.net/projects/phpvidz/ phpvidz does not use a SQL database. Instead it uses a system of flat files to maintain application state. The administrative passwo...

Feindura File Manager 1.0(rc) Remote File Upload

Exploit for php platform in category web applications ================================================ Feindura File Manager 1.0rc Remote File Upload ================================================ My + Author : KnocKout Contact : email protected Software info Web App. : Feindura - Flat File...

Feindura File Manager 1.0(rc) - Arbitrary File Upload

Feindura File Manager 1.0rc - Arbitrary File Upload =================================================== Feindura File Manager 1.0rc - Remote File Upload =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : Feindura - Flat...

Feindura File Manager 1.0(rc) - Arbitrary File Upload

=================================================== Feindura File Manager 1.0rc - Remote File Upload =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : Feindura - Flat File Content Management System 1.0 rc Software:...

phpvidz Administrative Password Disclosure

Original Advisory:http://blog.sitewat.ch/2010/05/phpvidz-administrative-password.html Affecting: phpvidz 0.9.5 Vulnerability: Administrative Password Disclosure Vendor's Homepage: http://sourceforge.net/projects/phpvidz/ Date: May 15th 2010 Researcher: Michael Brooks phpvidz does not use a SQL...

[SECURITY] Fedora 11 Update: nss_db-2.2-46.fc11

Nssdb is a set of C library extensions which allow Berkeley Databases to be used as a primary source of aliases, ethers, groups, hosts, networks, protocol, users, RPCs, services, and shadow passwords instead of or in addition to using flat files or NIS. Install nssdb if your flat name service fil...

[SECURITY] Fedora 12 Update: nss_db-2.2-47.fc12

Nssdb is a set of C library extensions which allow Berkeley Databases to be used as a primary source of aliases, ethers, groups, hosts, networks, protocol, users, RPCs, services, and shadow passwords instead of or in addition to using flat files or NIS. Install nssdb if your flat name service fil...

Sql injection

SQL injection vulnerability in the Flat Manager flatmgr extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4802

SQL injection vulnerability in the Flat Manager flatmgr extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4802

CVE-2009-4802 affects the TYPO3 Flat Manager (flatmgr) extension prior to version 1.9.16. It allows remote SQL injection via unspecified vectors, enabling attackers to execute arbitrary SQL commands. Remediation: upgrade to flatmgr 1.9.16 or later (per sources). The connected Red Hat/NVD entries ...

CVE-2009-4802

SQL injection vulnerability in the Flat Manager flatmgr extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4802: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Flat Manager flatmgr extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...