b2ePMS 1.0 SQL Injection

Title: b2ePMS 1.0 multiple SQLi Vulnerabilities Version: 1.0 Author/Found by: loneferret Manifacturer/Software link: https://developer.berlios.de/projects/b2epms/ Other vulnerability: http://www.exploit-db.com/exploits/18882/ Date found: May 27th 2012 Tested on: Ubuntu Server 8.04 / PHP Version...

b2ePMS 1.0 multiple SQLi Vulnerabilities

Exploit for php platform in category web applications Title: b2ePMS 1.0 multiple SQLi Vulnerabilities Version: 1.0 Author/Found by: loneferret Manifacturer/Software link: https://developer.berlios.de/projects/b2epms/ Other vulnerability: http://www.exploit-db.com/exploits/18882/ Date found: May...

Wolfcms <= 0.75 CSRF / XSS Vulnerabilities

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms = 0.75 Multiple Vulnerabilities CSRF - XSS Date : 22-03-2012 Author : Ivano Binetti...

WinMerge 2.12.4 Stack Overflow

!/usr/bin/perl Title: WinMerge v2.12.4 Project File Handling Stack Overflow Vulnerability Vendor: Thingamahoochie Software Product web page: http://www.winmerge.org Affected version: 2.12.4.0 Unicode Summary: WinMerge is an Open Source differencing and merging tool for Windows. WinMerge can compa...

Jamit Job Board - post_id Cross-Site Scripting

Jamit Job Board - postid Cross-Site Scripting source: https://www.securityfocus.com/bid/37701/info Jamit Job Board is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

Telepark.wiki Multiple Vulnerabilities

Telepark.wiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SixCMS 6.0 - detail.php Directory Traversal

SixCMS 6.0 - detail.php Directory Traversal source: https://www.securityfocus.com/bid/18395/info SixCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrie...

MODx CMS 0.9.1 - 'index.php' Directory Traversal

source: https://www.securityfocus.com/bid/17533/info MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...

GGZ Gaming Zone 0.0.12 - Multiple Denial of Service Vulnerabilities

GGZ Gaming Zone 0.0.12 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/17094/info GGZ Gaming Zone is prone to multiple remote denial-of-service vulnerabilities. These issues are due to improper input sanitization. An attacker may cause the victim's connectio...

GGZ Gaming Zone 0.0.12 - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/17094/info GGZ Gaming Zone is prone to multiple remote denial-of-service vulnerabilities. These issues are due to improper input sanitization. An attacker may cause the victim's connection to the server to terminate, causing a denial of service to...

PHPXplorer 0.9.33 - 'action.php' Directory Traversal

source: https://www.securityfocus.com/bid/16292/info phpXplorer is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...

PHPCOIN 1.2.2 - '/includes/db.php?$_CCFG[_PKG_PATH_DBSE]' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15831/info PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote PHP code and execute it in the context ...

EncapsGallery 1.0 - 'gallery.php' SQL Injection

source: https://www.securityfocus.com/bid/15836/info EncapsGallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

vBulletin 1.0.1 lite2.x3.0 - admincpuser.php Multiple SQL Injections

vBulletin 1.0.1 lite2.x3.0 - admincpuser.php Multiple SQL Injections source: https://www.securityfocus.com/bid/14872/info vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...

PHPMyFAQ 1.5.1 - Local File Inclusion

source: https://www.securityfocus.com/bid/14929/info PHPMyFAQ is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code that resides o...

VBZoom Forum 1.11 - 'show.php' SQL Injection

source: https://www.securityfocus.com/bid/14383/info VBZooM Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

DUware DUamazon Pro 3.03.1 - review.asp?iPro SQL Injection

DUware DUamazon Pro 3.03.1 - review.asp?iPro SQL Injection source: https://www.securityfocus.com/bid/14033/info DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

Loki Download Manager 2.0 - 'Catinfo.asp' SQL Injection

source: https://www.securityfocus.com/bid/13900/info Loki Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'catinfo.asp' script before using it in an SQL query. Successful exploitation...

NEXTWEB (i)Site - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13834/info NEXTWEB iSite is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

JiRo's Upload System 1.0 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13833/info JiRo's Upload System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...