AHLANNET SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2012-1058

Summary: CVE-2012-1058 is a CSRF vulnerability in Flyspray 0.9.9.6 that allows remote attackers to hijack admin authentication by triggering admin.newuser actions on index.php to add new admin accounts. What is affected: Flyspray 0.9.9.6. The connected documents describe the vulnerability as CSRF...

CVE-2012-1058: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php...

PT-2012-3047

Name of the Vulnerable Software and Affected Versions Flyspray version 0.9.9.6 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an "admin.newuser" action to "index.php". Recommendations For...

PT-2012-3055

Name of the Vulnerable Software and Affected Versions WP-RecentComments plugin version 2.0.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in an rc-content action to "index.php". Recommendations For WP-RecentComments plugin...

Nova CMS Remote File Inclusion

========================== Nova CMS RFI Vulnerability ========================== Vendor: http://canopus.oron.com/i755lr7evek7np4dpndrvbqcqhs3uj4igorbmlhaqwglgek3qc2old7whll7z4mlrtcyk73t/MachForm.v2.4.PHP.NULL-DGT.zip Date: 2012-1-27 Author : indoushka Exploit By indoushka ------------- dork :...

CVE-2011-5076

SQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other versions allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php. NOTE: some of these details are obtained from third party information...

PT-2012-2054

Name of the Vulnerable Software and Affected Versions HDWiki versions 5.0 through 5.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the PATH INFO to index.php, specifically targeting the model/comment.class.php file. Recommendation...

CVE-2011-5076

The CVE-2011-5076 entry describes an SQL injection in HDWiki’s model/comment.class.php for HDWiki 5.0/5.1 (and possibly other versions), exploitable via PATH_INFO to index.php, allowing remote execution of arbitrary SQL commands. Root cause: unsafe SQL construction in the affected file. Documents...

CVE-2012-1028: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter...

CVE-2012-1023: Improper Input Validation

Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

CVE-2011-5076: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other versions allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php. NOTE: some of these details are obtained from third party information...

CVE-2012-1029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-1023

The CVE-2012-1023 entry concerns an Open Redirect vulnerability in 4images 1.7.10, specifically in admin/index.php where an attacker can abuse the redirect parameter to send users to arbitrary sites, enabling phishing-like redirection. Connected sources confirm the affected product (4images 1.7.1...

PT-2012-3027

Name of the Vulnerable Software and Affected Versions SimpleGroupware versions prior to 0.743 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the export parameter in the /bin/index.php file. Recommendations For versions prior to 0.74...

PT-2012-3028

Name of the Vulnerable Software and Affected Versions Tube Ace Adult PHP Tube Script version 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the q parameter in the "mobile/search/index.php" endpoint. Recommendations For Tube Ace Adult PHP...

CVE-2012-0981

Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. dot dot in the r parameter to index.php. NOTE: Some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

PT-2012-2987

Name of the Vulnerable Software and Affected Versions phpShowtime version 2.0 Description A directory traversal issue allows remote attackers to list arbitrary directories and image files by using a .. dot dot in the r parameter to the "index.php" endpoint. Recommendations For phpShowtime version...

CVE-2012-0981: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. dot dot in the r parameter to index.php. NOTE: Some of these details are obtained from third party information...