Joomla XMovie 1.0 Local File Inclusion

Exploit Title: Joomla Component comxmovie 1.0 Local File Inclusion Vulnerability Author: KelvinX [email protected] Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr Date: December, 24-2010 Location: HCM City, Vietnam ------------------------ Application: comxmovie...

Sql injection

Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 aka Uploader PRO, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a img.php, b file.php, c mail.php, d thumb.php, e zip.php, and f zipit.php, and 2 the view parameter t...

CVE-2008-5075: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 aka Uploader PRO, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a img.php, b file.php, c mail.php, d thumb.php, e zip.php, and f zipit.php, and 2 the view parameter t...

CVE-2006-2928: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter in 1 dialogs/img.php and 2 dialogs/td.php...

cms-bandits 2.5, Remote command execution

----------------------------------------------------- Advisory id: FSA:006 Author: Federico Fazzi Date: 08/06/2006, 11:09 Sinthesis: cms-bandits 2.5, Remote command execution Type: high Product: http://sourceforge.net/projects/cms-bandits Patch: unavailable...

Cross site scripting

Cross-site scripting XSS vulnerability in img.php in 1 EasyMoblog 0.5.1 and 2 CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2006-1377

Cross-site scripting XSS vulnerability in img.php in 1 EasyMoblog 0.5.1 and 2 CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2006-1377

Cross-site scripting XSS vulnerability in img.php in 1 EasyMoblog 0.5.1 and 2 CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2006-1377

The CVE-2006-1377 entry describes a Cross-site scripting (XSS) vulnerability in img.php for the applications EasyMoblog 0.5.1 and CoMoblog 1.1 , where an attacker can inject arbitrary web script or HTML via the i parameter. The vulnerability is triggered remotely and the impact stated is that the...

CVE-2006-1377: Undefined Security Weakness

Cross-site scripting XSS vulnerability in img.php in 1 EasyMoblog 0.5.1 and 2 CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CoMoblog 1.0 - Img.php Cross-Site Scripting

CoMoblog 1.0 - Img.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17201/info CoMoblog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

[KAPDA::#37] - CoMoblog XSS

KAPDA::37 - CoMoblog XSS KAPDA New advisory CoMoblog XSS ------------------------------------------ Bug: http://victim/path/img.php?i=CODE Vendor: http://www.easymoblog.org/ Vulnerable: CoMoblog 1.1 ------------------------------------------ ------------------------------------------ Orginal...