698 matches found
Multi Website 1.5 - index PHP action SQL Injection
Bug : Powered by Multi Website 1.5 index php action Remote SQL Injection Vulnerability + Script home : http://www.multi-website.com + Affected versions : 1.5 + Solution : nothing .; ======================================================= == AuThOr : SarboT511 == EmaiL : [email protected] == HomE :...
Multi Website 1.5 - index PHP action SQL Injection
Multi Website 1.5 - index PHP action SQL Injection + Bug : Powered by Multi Website 1.5 index php action Remote SQL Injection Vulnerability + Script home : http://www.multi-website.com + Affected versions : 1.5 + Solution : nothing .; ======================================================= ==...
CVE-2009-2152
SQL injection vulnerability in aindex.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands via the CodigoDisciplina parameter in a TopicosCadastro1 action...
PT-2008-6645 · Projectpier · Projectpier
Name of the Vulnerable Software and Affected Versions: ProjectPier versions 0.8 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via various means, including a message, a milestone, or a display name in a profile, or the a or c parameter to...
CVE-2008-4604
SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...
CVE-2008-2815
SQL injection vulnerability in shopping/index.php in MyMarket 1.72 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2813
Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...
CVE-2008-2788
Cross-site scripting XSS vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter...
CVE-2008-2792
SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter...
Dream4 Koobi Pro 6.25 Shop - categ SQL Injection
Dream4 Koobi Pro 6.25 Shop - categ SQL Injection Koobi Pro 6.25 shop categ all version Koobi AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index php p shop"categ EXPLOiT :...
RunCMS Module MyAnnonces (cid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== RunCMS Module MyAnnonces cid SQL Injection Vulnerability ========================================================== runcms MyAnnonces SQL Injectioncid DORK 1 : allinurl: "modules...
CVE-2007-6695
Cross-site scripting XSS vulnerability in index.php in Drake CMS 0.4.9 allows remote attackers to inject arbitrary web script or HTML via the option parameter...
CVE-2007-6647
SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...
CVE-2007-6660
The CVE-2007-6660 entry involves the 2z project version 0.9.6.1 where information disclosure can occur via (1) a request to index.php with an invalid template or (2) a request to the default URI with certain year/month parameters, causing error messages that reveal the path. The NVD description d...
CVE-2007-6489
Multiple cross-site scripting XSS vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the 1 gbmail, 2 gbname, and 3 gbtext parameters in a guestbook action to index.php, and unspecified other vectors...
CVE-2007-6455
Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...
UBUNTU-CVE-2007-5109
Cross-site request forgery CSRF vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified 1 regpass and 2 level parameters in a noneLogin action, as demonstrated by using...
PT-2007-3877 · Pfa · Pfa Cms
Name of the Vulnerable Software and Affected Versions: pfa CMS version 6.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the repinc parameter in the index.php file. However, it's noted that $repinc is set to a constant value before use, which disputes t...
PT-2007-3644 · Bloofox · Bloofoxcms
Name of the Vulnerable Software and Affected Versions: BlooFoxCMS version 0.2.2 Description: The issue concerns a PHP remote file inclusion vulnerability in the install/index.php file of BlooFoxCMS. This vulnerability potentially allows remote attackers to execute arbitrary PHP code via a URL in...