CVE-2009-4722: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2010-0696: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos JwallVideos plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ modified dot dot in the file parameter...

CVE-2010-0678

The vulnerability CVE-2010-0678 affects Katalog Stron Hurricane 1.3.5 (and possibly earlier) via a PHP remote file inclusion in includes/moderation.php when register_globals is enabled. An attacker can supply a URL in the includes_directory parameter to execute arbitrary PHP code on the server. T...

CVE-2010-0678: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includesdirectory parameter...

CVE-2010-0471: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comment submission interface includes/comment.php in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters...

ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability

ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-095 December 9, 2009 -- CVE ID: CVE-2009-3849 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Network Node Manager --...

CVE-2009-4220: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfigsmartyPath parameter...

CVE-2009-4154: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

Power BB 1.8.3 Remote File Includes

No description provided by source. Dada?lar Grup Komutanl??? | HackSpy | Zombie | KroNickq | DigitALL | NoFearx38 | 1923Turk Grup by DigitALL Sites : http://powerwd.net Download : http://www.phpexplorer.com/Goster/536 Download : http://sourceforge.net/projects/pbb/ Power BB 1.8.3 Remote File...

Power BB 1.8.3 Remote File Includes

Exploit for unknown platform in category web applications =================================== Power BB 1.8.3 Remote File Includes =================================== Sites : http://powerwd.net Download : http://www.phpexplorer.com/Goster/536 Download : http://sourceforge.net/projects/pbb/ Power B...

CVE-2009-4060: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter...

CVE-2009-4046: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in FrontAccounting FA 2.2.x before 2.2 RC allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 bankaccounts.php, 2 currencies.php, 3 exchangerates.php, 4 glaccounttypes.php, and 5 glaccounts.php in gl/manage/; and 6...

WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' CSS

Exploit for unknown platform in category web applications ================================================================================ WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability...

Dazzle Blast Remote File Inclusion

Exploit for unknown platform in category web applications ================================== Dazzle Blast Remote File Inclusion ================================== o Dazzle Blast Remote File Inclusion Vulnerability Software : Dazzle Blast Download : http://www.dazzleblast.com/dazzleblast.zip Autho...

Dazzle Blast Remote File Inclusion

No description provided by source. o Dazzle Blast Remote File Inclusion Vulnerability Software : Dazzle Blast Download : http://www.dazzleblast.com/dazzleblast.zip Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/ Home : http://antisecurity.org/ o Vulnerable fi...

CVE-2009-3426: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/filemanager/special.php in MaxCMS 3.11.20b allows remote attackers to execute arbitrary PHP code via a URL in the fmincludesspecial parameter...

CVE-2009-3425: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/inc.thcmsadmindirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMSroot parameter...

CVE-2009-3153: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 picid parameter to includes/videoad.php, 2 category parameter to linkvideoslisting.php, id parameter to 3 templates/header1.php and 4...

CVE-2009-3052: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in root/includes/primequickstyle.php in the Prime Quick Style addon before 1.2.3 for phpBB 3 allows remote authenticated users to execute arbitrary SQL commands via the primequickstyle parameter to ucp.php...

CVE-2008-7097: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Qsoft K-Rate Premium allow remote attackers to execute arbitrary SQL commands via 1 the $id variable in admin/includes/delecpac.php, 2 $ordorderid variable in payments/paymentreceived.php, 3 $id variable in includes/functions.php, and 4 unspecified...