FineCMS多个SQL注射漏洞

简要描述： FineCMS多个SQL注射 详细说明： 注射文件存在于：/fang/目录下index.php文件 射点一：http://www.dayrui.net/fang/index.php 以官方演示站演示证明： http://www.dayrui.net/fang/index.php?c=search&area=2395&catid=1&order=updatetime' http://www.dayrui.net/fang/index.php?c=search&area=2395&zujin=0%2C500&catid=1'...

Crime24 Stealer v1 /index.php SQL注入漏洞

No description provided by source...

CVE-2013-5939

Multiple cross-site scripting XSS vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the 1 list or 2 introduce parameter to index.php...

CVE-2013-5939: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the 1 list or 2 introduce parameter to index.php...

PT-2014-3001

Name of the Vulnerable Software and Affected Versions PHPCMS affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Guestbook module. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically,...

CVE-2013-1407: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro plugin before 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 scope parameter to index.php; 2 username, 3 dbemphone, 4 useremail, or 5...

Xshop Cross Site Scripting

Exploit Title: Iran XshoP XSS Vulnerability Google Dork: Dork Is PerSian ! See End Of Demo ! Date: 2014-03-27 Exploit Author: Medrik Vendor Homepage: http://www.xshopsaz.ir/ Tested on: Windows ----------------- Proof : Vulnerability in : index.php Page With ftp Paramter ! Exploit :...

PTCeffect 4.6 /index.php 本地文件包含漏洞

No description provided by source...

CVE-2014-2689

Cross-site scripting XSS vulnerability in Offiria 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to installer/index.php...

CVE-2014-2936: Improper Control of Generation of Code

The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via 1 the maindirhotfolder parameter to dirmng/index.php, or an unspecified parameter to 2 PPD/index.php, 3 dirmng/docmd.php, or 4 dirmng/param.php...

PT-2014-4872

Name of the Vulnerable Software and Affected Versions Offiria versions 2.1.0 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "installer/index.php". Recommendations For Offiria versions 2.1.0 and earlier, ...

CVE-2014-2933: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname...

PT-2014-4963

Name of the Vulnerable Software and Affected Versions Caldera version 9.20 Description A directory traversal issue exists, allowing remote attackers to access arbitrary directories by providing a crafted pathname in dirmng/index.php. Recommendations For Caldera version 9.20, update the...

PT-2014-4966

Name of the Vulnerable Software and Affected Versions Caldera version 9.20 Description The issue allows remote attackers to conduct variable-injection attacks in the global scope. This can be achieved via the maindir hotfolder parameter to "dirmng/index.php", or an unspecified parameter to...

CVE-2014-2689: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Offiria 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to installer/index.php...

BVS Site 4.0.1 / 5.2.1 Cross Site Scripting

Persistent Cross Site Scripting on BVS Site + Date: 02/05/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage: http://trac.reddes.bvsalud.org/projects/bvs-site/wiki/Downloads + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: index.php + Dork...

Adem 0.5.1 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications ----------exploit Debut Local File Include Vulnerability ----------Script Info Author : JIKO ----------Script Info Site : https://github.com/4FSB/Adem && http://adem.faares.com/demo Version : 0.5.1 Download :...

Vtiger 6.0 /index.php 命令执行漏洞

No description provided by source...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the 1 module or 2 message parameter to index.php...

Adem 0.5.1 Local File Inclusion

----------exploit Debut Local File Include Vulnerability ----------Script Info Author : JIKO ----------Script Info Site : https://github.com/4FSB/Adem && http://adem.faares.com/demo Version : 0.5.1 Download : https://codeload.github.com/4FSB/Adem/zip/master ----------exploit Info Exploit :...