EUVD-2001-1501

Malware in sbrugna...

EUVD-2006-6854

Malware in sbrugna...

CVE-2018-7434: Improper Limitation of a Pathname to a Restricted Directory

zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...

PT-2018-18068 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzcms version 8.2 Description: The issue allows remote attackers to discover the full path via a direct request to "3/qq connect2.0/API/class/ErrorCase.class.php" or "3/ucenter api/code/friend.php". Recommendations: For zzcms version 8.2, as ...

Thatware 0.4.6 - SQL Injection

Exploit for php platform in category web applications Exploit Title :----------------- : Thatware 0.4.6 - friend.php - SQL Injection Author :------------------------ : Besim Google Dork :---------------- : - Date :-------------------------- : 13/10/2016 Type :-------------------------- : webapps...

Thatware 0.4.6 - SQL Injection

Thatware 0.4.6 - SQL Injection Exploit Title :----------------- : Thatware 0.4.6 - friend.php - SQL Injection Author :------------------------ : Besim Google Dork :---------------- : - Date :-------------------------- : 13/10/2016 Type :-------------------------- : webapps Platform :...

Thatware 0.4.6 - SQL Injection

Exploit Title :----------------- : Thatware 0.4.6 - friend.php - SQL Injection Author :------------------------ : Besim Google Dork :---------------- : - Date :-------------------------- : 13/10/2016 Type :-------------------------- : webapps Platform : -------------------- : PHP Vendor Homepage...

PHP-Nuke 'friend.php' Module Remote SQL Injection

No description provided by source. Exploit Title: PHP-Nuke 'friend.php' Module Remote SQL Injection Date: 05.05.2010 Author: CMD Contact : [email protected] Version: all version =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code :...

PHP-Nuke - friend.php Module SQL Injection

PHP-Nuke - friend.php Module SQL Injection Exploit Title: PHP-Nuke 'friend.php' Module Remote SQL Injection Date: 05.05.2010 Author: CMD Contact : [email protected] Version: all version =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code :...

PHP-Nuke - 'friend.php' Module SQL Injection

Exploit Title: PHP-Nuke 'friend.php' Module Remote SQL Injection Date: 05.05.2010 Author: CMD Contact : [email protected] Version: all version =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : //and//1=0//union//select//groupconcataid,0x3a,pwd//from//authors/...

PHP-Nuke Friend SQL Injection

Exploit Title: PHP-Nuke 'friend.php' Module Remote SQL Injection Date: 05.05.2010 Author: CMD Contact : [email protected] Version: all version =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Tested on:...

PHP-Nuke (friend.php) Module Remote SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== PHP-Nuke friend.php Module Remote SQL Injection Vulnerability =============================================================== Exploit Title: PHP-Nuke 'friend.php' Module Remote SQ...

CVE-2006-6871

CVE-2006-6871 affects eNdonesia 8.4 with four XSS vectors : (1) mod.php viewlink parameter (mod), (2) informasi module showinfo intypeid, (3) the "your Friend" field in friend.php, (4) the "Main Text" field in admin.php. The vulnerability allows remote attackers to inject arbitrary web script or ...

CVE-2006-6874

The vulnerability is an XSS flaw in eNdonesia 8.4, specifically in the file/functIon friend.php, exploitable via the (1) Message or (2) Your Name fields. The connected records confirm affected software and version (eNdonesia 8.4) and that remote attackers can inject arbitrary web script or HTML. ...

CVE-2006-6874: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Message or 2 Your Name field. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6871: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter in a viewlink operation in mod.php, 2 the intypeid parameter in a showinfo operation in the informasi module in mod.php, 3 the "your Friend" fie...

CVE-2006-6871

Multiple cross-site scripting XSS vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter in a viewlink operation in mod.php, 2 the intypeid parameter in a showinfo operation in the informasi module in mod.php, 3 the "your Friend" fie...

eNdonesia 8.4 (mod.php/friend.php/admin.php) Multiple Vulnerabilities

No description provided by source. bugs for Endonesia8.4 FInd:z1ckXru mail:[email protected] 1 http://localhost/en/mod.php?mod=XSS&op=viewlink&cid=5 2 http://localhost/en/friend.php your Friend:XSS 3 http://localhost/en/admin.php Main Text: XSS 4...

eNdonesia 8.4 (mod.php/friend.php/admin.php) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== eNdonesia 8.4 mod.php/friend.php/admin.php Multiple Vulnerabilities ===================================================================== bugs for Endonesia8.4...

eNdonesia 8.4 - mod.phpfriend.phpadmin.php Multiple Vulnerabilities

eNdonesia 8.4 - mod.phpfriend.phpadmin.php Multiple Vulnerabilities bugs for Endonesia8.4 FInd:z1ckXru mail:[email protected] 1 http://localhost/en/mod.php?mod=XSS&op=viewlink&cid=5 2 http://localhost/en/friend.php your Friend:XSS 3 http://localhost/en/admin.php Main Text: XSS 4...