PT-2011-4632

Name of the Vulnerable Software and Affected Versions HelpCenter Live version 2.1.7 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing certain files, such as modules/HelpCenter/index.php, which reveals t...

PT-2011-4593

Name of the Vulnerable Software and Affected Versions AneCMS version 1.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as "widgets/menu/index.php", which reveals the installation path in...

CVE-2011-3703: Exposure of Sensitive Information to an Unauthorized Actor

AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/menu/index.php and certain other files...

CVE-2011-3742: Exposure of Sensitive Information to an Unauthorized Actor

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...

CVE-2011-3727: Exposure of Sensitive Information to an Unauthorized Actor

DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/tpl/index.php and certain other files...

PT-2011-4617

Name of the Vulnerable Software and Affected Versions DokuWiki version 2009-12-25c Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by requesting files such as lib/tpl/index.php, which reveals the installation...

OneCMS 2.6.4 SQL Injection

=========================================================== OneCMS 2.6.4 Remote SQL insertion Vulnerability ----------------------------------------------------------- foun by :kurdish hackers team group : kurd-team contact : [email protected] site : kurdteam.org...

Sql injection

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the 1 id parameter in a savedsearch action and 2 itemtypes parameter in a showitemsearch action in the...

CVE-2010-4834

The CVE-2010-4834 entry describes multiple SQL injection flaws in index.php for OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition. The vulnerabilities reside in the search_management_manage subcontroller, where remote authenticated users can manipulate the (1) id parameter in a saved_s...

CVE-2010-4835: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a showreport action...

CVE-2010-4834: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the 1 id parameter in a savedsearch action and 2 itemtypes parameter in a showitemsearch action in the...

CVE-2009-5089

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2009-5089

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

PHP Support Tickets 2.2 - Code Execution

Exploit Title: PHP Support Tickets v2.2 Code Exec Google Dork: "PHP Support Tickets v2.2" Date: 26.09.2010 Author: brainpillow Software Link: http://www.phpsupporttickets.com/ Version: 2.2 ==================================================================== Vuln. code: /classes/GUI/abstract.GUI.p...

PT-2011-1338

Name of the Vulnerable Software and Affected Versions IdeaCart versions 0.02 through 0.02a Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the page parameter of the index.php file. Recommendations For IdeaCart versions 0.02 through 0.02a, consider...

PT-2011-1337

Name of the Vulnerable Software and Affected Versions IdeaCart version 0.02 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cID parameter in the "secure/index.php" endpoint. Recommendations For IdeaCart version 0.02, consider restricting...

CVE-2009-5089: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2009-5088: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...

CVE-2011-3390: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...