CVE-2018-15850: Cross-Site Request Forgery (CSRF)

An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user...

vehiculesutilitairesmag.com XSS vulnerability

Open Bug Bounty ID: OBB-625745 Description| Value ---|--- Affected Website:| vehiculesutilitairesmag.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10082: Exposure of Sensitive Information to an Unauthorized Actor

CMS Made Simple CMSMS through 2.2.7 allows physical path leakage via an invalid /index.php?page= value, a crafted URI starting with /index.php?mact=Search, or a direct request to /admin/header.php, /admin/footer.php, /lib/tasks/class.ClearCache.task.php, or...

mktx.az XSS vulnerability

Vulnerable URL: http://mktx.az/index.php?page=archivenews=5" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check mktx.az SSL...

Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability

No description provided by source. scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

preCMS 1 - (index.php page) Remote SQL injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

WSN Guest 1.02 - orderlinks SQL Injection

WSN Guest 1.02 - orderlinks SQL Injection Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : WSN Guest 1.02 Download : http://scripts.webmastersite.net/wsnguest/wsnguest.zip Exploat :index.php?page=20&orderlinks=SQL...

YAP 1.1.1 - index.php Local File Inclusion

YAP 1.1.1 - index.php Local File Inclusion YAP v1.1.1 Local File Inclusion Vulnerability AUTHOR : Alkindiii CONTACT : Alkindiii 4T islamway D0T net HOME : http://www.soqor.net Script : YAP Version : 1.1.1 Download v1.1 : http://wildmary.net-sauvage.com/share/yap1.1.tar.gz Update to v1.1.1 :...

Unfixed XSS vulnerability at www.kentaurus.cz

Security researcher austinator, has submitted on 15/08/2008 a cross-site-scripting XSS vulnerability affecting www.kentaurus.cz, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is currentl...

syzygyCMS 0.3 (index.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= syzygyCMS 0.3 index.php page Local File Inclusion Vulnerability ================================================================= + syzygyCMS 0.3 Local File Inclusion +...

Aprox CMS Engine 5.1.0.4 (index.php page) SQL Injection Vulnerability

No description provided by source...

preCMS v.1 (index.php page) Remote SQL injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

Aprox CMS Engine 5.1.0.4 - 'index.php' SQL Injection

Viva IslaM Viva IslaM Remote SQL injection Vulnerability Aprox CMS Engine V5.1.0.4 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

php-Agenda 2.2.4 (index.php page) Local File Inclusion Vulnerability

No description provided by source. @===========================================@ | Author = StAkeR [email protected] | @===========================================@ + @==========================================================================@ | Simple PHP Agenda = 2.2.4 Local File Inclusion...

php-Agenda 2.2.4 (index.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== php-Agenda 2.2.4 index.php page Local File Inclusion Vulnerability ==================================================================== @=============email protected |...

PHP Site Lock 2.0 (index.php page) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== PHP Site Lock 2.0 index.php page Remote SQL Injection Vulnerability ===================================================================== Viva IslaM Viva IslaM Remote SQ...

PHP Site Lock 2.0 (index.php page) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHP Site Lock 2.0 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHP Site Lock version : 2.0 Site : www.phpsitelock.com -:: SQL ::-...

Bizon-CMS 2.0 - Id SQL Injection

Bizon-CMS 2.0 - Id SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability Bizon-CMS V2.0 index.php Page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : Bizon-CMS version : V2.0 site : www.bizon-soft.com -:: SQL ::- www.site.com/photo/...

Article Directory (index.php page) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Article Directory index.php page Remote File Inclusion Vulnerability ======================================================================...