CVE-2011-1674: Improper Authentication

The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php...

CVE-2011-1667: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...

CVE-2010-4783

The CVE-2010-4783 entry concerns multiple cross-site scripting (XSS) vulnerabilities in index.php of PHP Web Scripts Easy Banner Free 2009.05.18. The root cause described in sources is that with magic_quotes_gpc disabled, an attacker can inject arbitrary web script or HTML via the siteurl and url...

PT-2011-1728

Name of the Vulnerable Software and Affected Versions Enano CMS versions 1.0.6pl2 through 1.0.6pl2 and 1.1.7pl1 Description The issue allows remote attackers to execute arbitrary SQL commands via the email parameter to "index.php". This is due to a SQL injection vulnerability in the check banlist...

PT-2011-1731

Name of the Vulnerable Software and Affected Versions PHP Web Scripts Easy Banner Free version 2009.05.18 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the siteurl and...

CVE-2010-4781: Exposure of Sensitive Information to an Unauthorized Actor

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message...

CVE-2010-4780: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the checkbanlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these...

CVE-2010-4783: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 siteurl and 2 urlbanner parameters...

S40 CMS 0.4.2b - Local File Inclusion

Security Advisory Details: 07/04/2001 Script S40 CMS 0.4.2 Beta Location http://s40.biz/?p=download Vulnerability Local File Inclusion Original Adv http://y-osirys.com/security/exploits/id27 Author Giovanni Buzzin, "Osirys" Site y-osirys.com Contact osirysatautisticidotorg...

Pligg CMS 1.1.3 Privilege Escalation / Access Bypass

Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became evailable; patching took 7 days:...

Pligg CMS 1.1.3 - Multiple Vulnerabilities

Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became evailable; patching took 7 days:...

SimplisCMS 1.0.3.0 File Disclosure

Exploit Title: SimplisCMS 1.0.3.0 Remote File Disclosure Vulnerability home : http://www.D99Y.com Date: 27/3/2011 Author: NassRawI Software Link: http://modcove.com/index.php Demo : http://modcove.com/index.php?page=demo Version: 1.0.3.0 file : simpliscms/admin/index.php exploit :...

webEdition CMS 6.1.0.2 Local File Inclusion

=================================================================== webEdition CMS DOCUMENTROOT Local File Inclusion vulnerability =================================================================== Software: webEdition CMS 6.1.0.2 Vendor: http://www.webedition.org Vuln Type: Local File Inclusion...

Joomla Component com_ignitegallery SQL injection vulnerability

Exploit for php platform in category web applications Joomla Component comignitegallery SQL injection vulnerability‎ + Author : TiGeRYeMeN HaCkEr + Author Name : TiGEr... + Email : email protected + Greetz : Sa-HaCkEr + Group : No-Group + Vulnerability : SQL injection + Google Dork :...

webEdition CMS - Local File Inclusion

webEdition CMS - Local File Inclusion =================================================================== webEdition CMS DOCUMENTROOT Local File Inclusion vulnerability =================================================================== Software: webEdition CMS 6.1.0.2 Vendor:...

Sql injection

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

CVE-2010-4770

CVE-2010-4770 is a SQL injection vulnerability in the CommodityRentals DVD Rentals Script, exposed via index.php in the catalog action. The issue allows remote attackers to execute arbitrary SQL commands through the cat_id parameter. Documents confirm the affected software component is the script...

CVE-2010-4770: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

PT-2011-1719

Name of the Vulnerable Software and Affected Versions CommodityRentals DVD Rentals Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat id parameter in a "catalog" action, which is part of the index.ph...

PT-2011-1718

Name of the Vulnerable Software and Affected Versions com jimtawl version 1.0.2 Description The issue allows remote attackers to read arbitrary files and possibly have other impacts via a .. dot dot in the task parameter to "index.php". Recommendations For version 1.0.2, update to a version that...