EUVD-2008-6087

Malware in sbrugna...

Insecure Direct Object Reference

idno/known is vulnerable to Insecure Direct Object Reference. The vulnerable getContent and postContent functions in Homepage class in Homepage.php file allow remote authenticated attackers to gain access to certain settings of the admin panel due to the use of createGatekeeper inner function...

tcts.fpms.ac.be XSS vulnerability

Vulnerable URL: http://www.tcts.fpms.ac.be/homepage.php?Firstname="--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

BootcmsV1. 1. 2 \application\classes\controller\homepage.php the parameter q SQL injection

No description provided by source...

PHP168 homepage.php/admin/member-profile 敏感信息泄露

No description provided by source...

CVE-2009-1846

Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the THEMEFOLDER parameter to 1 Corporate/homepage.php, 2 Fusion/homepage.php, 3 Joombo/homepage.php, 4 Streamline/homepage.php,...

SiteX 0.7.4.418 - THEME_FOLDER Local File Inclusion

SiteX 0.7.4.418 - THEMEFOLDER Local File Inclusion =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script:SiteX074build418.zip ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

SiteX 0.7.4.418 Local File Inclusion

=-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script:SiteX074build418.zip ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...

CVE-2008-6117: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the pollviewid parameter in a results action...

pgjobsite-sql.txt

PG Job Site homepage.php pollviewid Blind Sql inj. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen Demolarý Hacklemeyin pls dont make hack demos N0T: YALNIZLIK, YiTiRDi...