Kayako eSupport 3.70.02 - 'functions.php' SQL Injection

Peace !! Name : Kayako eSupport v3.70.02 SQL Injection Vulnerability Date : july 18,2010 Vendor urL : http://www.kayako.com/solutions/esupport/ Dork :Find It !! Author : ScOrPiOn Greetz : Dr.Dmar & Joker1 & HiDDen HaCkEr & GeNeRaL KbKb & And All My Friends Effect : /includes/functions.php Here Th...

Kayako eSupport (functions.php) v3.70.02 SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================================== Kayako eSupport functions.php v3.70.02 SQL Injection Vulnerability ==================================================================== Name : Kayako eSupport v3.70.02 SQL...

ZykeCMS 1.1 SQL Injection

====================================================== ZykeCMS V1.1 Auth Bypass SQL Injection Vulnerability ====================================================== Author : Giuseppe 'giudinvx' D'Inverno Email : Date : 04-16-2010 Site : http://www.giudinvx.altervista.org/ Location : Naples, Italy...

Zyke CMS 1.1 - Authentication Bypass

Zyke CMS 1.1 - Authentication Bypass ====================================================== ZykeCMS V1.1 Auth Bypass SQL Injection Vulnerability ====================================================== Author : Giuseppe 'giudinvx' D'Inverno Email : Date : 04-16-2010 Site :...

Zyke CMS 1.1 - Authentication Bypass

====================================================== ZykeCMS V1.1 Auth Bypass SQL Injection Vulnerability ====================================================== Author : Giuseppe 'giudinvx' D'Inverno Email : Date : 04-16-2010 Site : http://www.giudinvx.altervista.org/ Location : Naples, Italy...

WordPress 2.2 functions.php 跨站脚本攻击漏洞

No description provided by source...

Datenator 0.3.0 - event.php?id SQL Injection

Datenator 0.3.0 - event.php?id SQL Injection Exploit Title: Datenator 0.3.0 event.php id SQL Injection Date: 26.12.09 Author: TheHuliGun Look on code in event.php: 22: ifisset$GET'id' 23: 24: $event = $datenator-readeventinfo$GET'id'; Function readeventinfo is in file includes/functions.php 412:...

WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' CSS

Exploit for unknown platform in category web applications ================================================================================ WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability...

WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability

No description provided by source. An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI. The following proof of concept is available: curl -H "Cookie: my cookies here" -H "Host: body onload=alertString.fromCharCode88,83,83"...

Community Translate Remote File Inclusion

o Community Translate Remote File Inclusion Vulnerability Software : Community Translate Project Home : http://code.google.com/p/communitytranslate/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/ Home : http://antisecurity.org/ o Vulnerable file...

Community Translate File Inclusion Vulnerability

No description provided by source. o Community Translate Remote File Inclusion Vulnerability Software : Community Translate Project Home : http://code.google.com/p/communitytranslate/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/ Home :...

Community Translate - Remote File Inclusion

o Community Translate Remote File Inclusion Vulnerability Software : Community Translate Project Home : http://code.google.com/p/communitytranslate/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/ Home : http://antisecurity.org/ o Vulnerable file...

Orbis CMS 1.0 (AFD/ADF/ASU/SQL) Multiple Remote Vulnerabilities

No description provided by source. + Orbis CMS 1.0 AFD/ADF/ASU/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Dork : Powered by Orbis CMS + Download script : http://www.novo-ws.com/orbis-cms/download.shtml + Arbitrary File Download + -...

Limny 1.01 - Authentication Bypass

Limny 1.01 - Authentication Bypass + Limny 1.01 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Script Homepage : http://www.limny-project.com/ + SQL Injection Vulnerability - Notes : magicquotesgpc = off - Vulnerable code in...

Limny 1.01 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Limny 1.01 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Script Homepage : http://www.limny-project.com/ + SQL Injection Vulnerability - Notes : magicquotesgpc = off - Vulnerable code in...

CVE-2009-2380

Cross-site scripting XSS vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable...

Directory traversal

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...

CVE-2009-2161

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...

eliteCMS 1.01 XSS / SQL Injection

eliteCMS 1.01 SQL/XSS Multiple Remote Vulns by xenohive greets to daganarus, dearest of all my friends. SQL injection requires magicquotes = off -/includes/functions.php --------------------------------- 89. function getpagesettings ... 92. $query = "SELECT FROM pages WHERE id = '$GET'page''"; 93...

eliteCMS 1.01 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= eliteCMS 1.01 SQL/XSS Multiple Remote Vulnerabilities ======================================================= eliteCMS 1.01 SQL/XSS Multiple Remote Vulns by xenohive greets to...