13400 matches found
CVE-2012-6045: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in gb/user/index.php in Ramui Forum, possibly 1.0 Beta, allows remote attackers to inject arbitrary web script or HTML via the query parameter...
PT-2012-6236
Name of the Vulnerable Software and Affected Versions Ramui Forum version 1.0 Beta Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the query parameter in the "gb/user/index.php"...
Directory traversal
Directory traversal vulnerability in Jstore comjstore component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...
SmartCMS (index.php, idx parameter) SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================================================================================= o SmartCMS = SQL Injection Vulnerability Software : SmartMS Vendor : http://smartcms.nl/ Author : NoGe Contact :...
SmartCMS - index.php?idx SQL Injection
SmartCMS - index.php?idx SQL Injection ============================================================================================================= o SmartCMS = SQL Injection Vulnerability Software : SmartMS Vendor : http://smartcms.nl/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog :...
CVE-2010-5286: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Jstore comjstore component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...
ApPHP MicroCMS SQL Injection Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
WordPress Plugin Facebook Survey 1.0 - SQL Injection
WordPress Plugin Facebook Survey 1.0 - SQL Injection Title: ====== Wordpress Facebook Survey v1 - SQL Injection Vulnerability Date: ===== 2012-11-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=766 VL-ID: ===== 766 Common Vulnerability Scoring System:...
CVE-2012-5909
SQL injection vulnerability in admin/modules/user/users.php in MyBB aka MyBulletinBoard 1.6.6 allows remote attackers to execute arbitrary SQL commands via the conditionsusergroup parameter in a search action to admin/index.php...
CVE-2012-5908
Cross-site scripting XSS vulnerability in admin/modules/user/users.php in MyBB aka MyBulletinBoard 1.6.6 allows remote attackers to inject arbitrary web script or HTML via the conditionsusergroup parameter in a search action to admin/index.php...
PT-2012-6190
Name of the Vulnerable Software and Affected Versions MyBB aka MyBulletinBoard version 1.6.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the conditionsusergroup parameter in a search action to "admin/index.php". Recommendations For MyBB ak...
91736cms 1.9.7 index.php SQL注入
No description provided by source...
PT-2012-6184
Name of the Vulnerable Software and Affected Versions Simple Machines Forum version 2.0.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the scheduled parameter to the "index.php" endpoint. Recommendations...
PT-2012-6189
Name of the Vulnerable Software and Affected Versions MyBB version 1.6.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the conditionsusergroup parameter in a search action to "admin/index.php". Recommendations For MyBB...
CVE-2012-5903: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the scheduled parameter to index.php...
CVE-2012-4532
Cross-site scripting XSS vulnerability in modules/modlanguages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php. NOTE: some of these details are obtained from third party...
CVE-2012-4532: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in modules/modlanguages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php. NOTE: some of these details are obtained from third party...
PT-2012-5464
Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.x through 2.5.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the PATH INFO to index.php. Recommendations For versio...
One Page Directory Multiple SQL/RFI Vulnerabilities
Exploit for php platform in category web applications / @exploit One Page Directory Multiple SQL/RFI Vulnerabilities @script EN-Title One Page Directory @script AR-Title برنامج وصلة @virsion 2.0 @author Cold Zero www.hackteach.org @copyright 25/10/2012 @script...