CVE-2016-10038

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove...

CVE-2016-10037

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id aka dir parameter, related to browser/directory/getlist...

bikescale.com XSS vulnerability

Vulnerable URL: http://bikescale.com/index.php?d=artykul...

PT-2016-4562

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.5.2-pl Description The issue allows remote attackers to perform local file inclusion, traversal, and manipulation via a crafted id also known as dir parameter in the /connectors/index.php file. This is relat...

PT-2016-4564

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.5.2-pl Description The issue allows remote attackers to perform local file inclusion, traversal, and manipulation via a crafted dir parameter in the /connectors/index.php file. This is related to the...

CVE-2016-10039: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/getfiles...

CVE-2016-10037: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id aka dir parameter, related to browser/directory/getlist...

PT-2016-4563

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.5.2-pl Description The issue allows remote attackers to perform local file inclusion, traversal, and manipulation via a crafted dir parameter in the /connectors/index.php file. This is related to browser,...

Docebo LMS v6.9 - (Clone Links) Persistent Vulnerability

Document Title: =============== Docebo LMS v6.9 - Clone Links Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1878 Release Date: ============= 2016-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 187...

F3 designs Website SQL Injection Vulnerability

F3 designs is a custom website design and development framework. A SQL injection vulnerability exists in the lang parameter of the index.php page of F3 designs. Because the program fails to adequately filter user-submitted input, an attacker could use this vulnerability to compromise the...

Arbitrary file upload vulnerability in the $_FILES ['ttsFile'] and $_POST['taskid'] parameters of the Mixcall agent management system.

Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file upload vulnerability exists in the...

PHP Support Tickets 1.3 Local File Inclusion

PHPSTicketsv1.3 File Inclusion Vulnerability ================================================ Discovered by NA, NAattutanota.com ======================================= Description ============ PHP Support Tickets; will allow a webmaster the ability to offer its user base a means to contact its...

Codoforum 3.4 Build 19 Cross Site Scripting

======================================================================== | Title : codoforum.v.3.4.build-19 XSS vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 5.2.0 | Vendor : http://codoforum.com/ | Dork : Powered by...

gameworks.ch XSS vulnerability

Vulnerable URL: http://www.gameworks.ch/2010/index.php?m=10" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5619557 VIP website status:| No Check gameworks.ch SSL connection:| Grad...

pedagogie.ac-toulouse.fr XSS vulnerability

Vulnerable URL: http://pedagogie.ac-toulouse.fr/svt/serveur/bankact/index.php?m=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

HandMade Connection CMS index.php parameter file arbitrary File Download vulnerability

No description provided by source...

Theindia index.php the Parameters page of the SQL blind injection vulnerability

No description provided by source...

laznia.pl XSS vulnerability

Vulnerable URL: http://www.laznia.pl/index.php?lang=en';...

mktx.az XSS vulnerability

Vulnerable URL: http://mktx.az/index.php?page=archivenews=5" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check mktx.az SSL...

valotte.free.fr XSS vulnerability

Vulnerable URL: http://valotte.free.fr/index.php?cat=race-curly" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5730211 VIP website status:| No Check valotte.free.fr SSL connection...