Galilery 1.0 Local File Inclusion

$ cat 15lfigalilery.1.0.txt exploit title: local file include in Galilery 1.0 date: 18.o2.2o11 author: lemlajt software : Galilery version: 1.0 tested on: linux cve : http://ftp.heanet.ie/disk1/sourceforge/g/project/ga/galilery/Galilery/ PoC :...

Galilery 1.0 Local File Inclusion Vulnerability

Exploit for php platform in category web applications exploit title: local file include in Galilery 1.0 date: 18.o2.2o11 author: lemlajt software : Galilery version: 1.0 tested on: linux cve : http://ftp.heanet.ie/disk1/sourceforge/g/project/ga/galilery/Galilery/ PoC :...

PT-2011-2847

Name of the Vulnerable Software and Affected Versions TaskFreak! version 0.6.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including sContext, sort, dir, and show in a save action to "index.php", dir and show parameters to "print...

CVE-2011-1060: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php...

PT-2011-2845

Name of the Vulnerable Software and Affected Versions WSN Guest version 1.24 Description A SQL injection issue exists in the member function in classes/member.php, allowing remote attackers to execute arbitrary SQL commands via the wsnuser cookie to "index.php". Recommendations For WSN Guest...

PT-2011-2833

Name of the Vulnerable Software and Affected Versions VastHTML Forum Server aka ForumPress plugin versions 1.6.1 through 1.6.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the search max parameter in a "search" action to "index.php", th...

CVE-2011-1047: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in VastHTML Forum Server aka ForumPress plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 searchmax parameter in a search action to index.php, which is not properly handled by wpf.class.php, 2 id paramete...

PT-2011-1689

Name of the Vulnerable Software and Affected Versions Maian Media Silver com maianmedia component for Joomla affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cat parameter in a music action to the...

CVE-2010-4739: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Maian Media Silver commaianmedia component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a music action to index.php...

TaskFreak! 0.6.4 - Multiple Cross-Site Scripting Vulnerabilities

TaskFreak! 0.6.4 - Multiple Cross-Site Scripting Vulnerabilities TaskFreak! v0.6.4 Multiple Cross-Site Scripting Vulnerabilities Vendor: Stan Ozier Product web page: http://www.taskfreak.com Affected version: 0.6.4 multi-user Summary: TaskFreak! Original is a simple but efficient web based task...

CVE-2011-0526

Cross-site scripting XSS vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action...

PT-2011-2429

Name of the Vulnerable Software and Affected Versions Zikula versions prior to 1.2.5 Description A cross-site request forgery CSRF issue exists in the Users module, allowing remote attackers to hijack administrator authentication for requests that modify account privileges. This is achieved by...

MyMarket 1.71 (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ====================================================...

CVE-2011-0526: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action...

Directory traversal

Multiple directory traversal vulnerabilities in AR Web Content Manager AWCM 2.2 allow remote attackers to read arbitrary files and possibly have other unspecified impact via a .. dot dot in the 1 awcmtheme or 2 awcmlang cookie to a index.php or b header.php...

MyMarket 1.71 SQL Injection

Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ==================================================== http://www.site.com/mymarket/shopping/index.php?id= SQL Codes...

MyMarket 1.71 - index.php SQL Injection

MyMarket 1.71 - index.php SQL Injection Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ====================================================...

MyMarket 1.71 - 'index.php' SQL Injection

Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ==================================================== http://www.site.com/mymarket/shopping/index.php?id= SQL Codes...

PT-2011-2748

Name of the Vulnerable Software and Affected Versions AR Web Content Manager AWCM version 2.2 Description The issue allows remote attackers to read arbitrary files and possibly have other unspecified impact. This is achieved by exploiting directory traversal vulnerabilities using a .. dot dot in...

Dew-NewPHPLinks 2.1b - index.php SQL Injection

Dew-NewPHPLinks 2.1b - index.php SQL Injection Dew-NewPHPLinks v.2.1b index.php Sql Injection Vulnerability ====================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://www.dew-code.com/ .:. Dork : "Powered By Dew-NewPHPLinks...