Dew-NewPHPLinks 2.1b - index.php SQL Injection

Dew-NewPHPLinks 2.1b - index.php SQL Injection Dew-NewPHPLinks v.2.1b index.php Sql Injection Vulnerability ====================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://www.dew-code.com/ .:. Dork : "Powered By Dew-NewPHPLinks...

CVE-2010-4718

Multiple cross-site scripting XSS vulnerabilities in the Lyftenbloggie comlyftenbloggie component 1.1.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 tag and 2 category parameters to index.php...

TinyWebGallery 1.8.3 Cross Site Scripting / Directory Traversal

Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview, dir, item. Examples:...

PT-2011-1668

Name of the Vulnerable Software and Affected Versions com lyftenbloggie version 1.1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the tag and category parameters to "index.php". This can lead to cross-site scripting XSS attacks. Recommendations For...

CVE-2010-4718: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Lyftenbloggie comlyftenbloggie component 1.1.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 tag and 2 category parameters to index.php...

RW-Download 4.0.6 - 'index.php' SQL Injection

/////////////////////////Dr.NeT/////////////////////////////////Dr.NeT//////////////////////Dr.NeT////////// //Title ||= RW-Download v4.0.6 = index.php SQL Injection Vulnerability // //Secript ||= RW-Download // //Language||= Php // //Download||=...

RW-Download 4.0.6 - index.php SQL Injection

RW-Download 4.0.6 - index.php SQL Injection /////////////////////////Dr.NeT/////////////////////////////////Dr.NeT//////////////////////Dr.NeT////////// //Title ||= RW-Download v4.0.6 = index.php SQL Injection Vulnerability // //Secript ||= RW-Download // //Language||= Php // //Download||=...

MultiCMS Local File Inclusion

=============================wwwdotWhiteponnydotcom============================= Date: 29/01/2011 Author: R3VANBASTARD Exploit Title: MultiCMS File Inclusion Vulnerbility Vendor: http://www.multicms.net Status: FIXED Tested on: Windows 7 Dork: "Redakcní systém MultiCMS" Mail:...

PT-2011-1218

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 2.x through 3.x prior to 3.3 Description The issue is related to multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to add and execute commands of their choice through the use of...

Code injection

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter FTP-Server field to the sicore/updates/optionssav operation for index.php...

CVE-2011-0635

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter FTP-Server field to the sicore/updates/optionssav operation for index.php...

CVE-2011-0635

CVE-2011-0635 affects Simploo CMS 1.7.1 and earlier. The vulnerability is a static code injection flaw where remote authenticated users can inject arbitrary PHP into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation of index.php. ...

PT-2011-2513

Name of the Vulnerable Software and Affected Versions Simploo CMS versions 1.7.1 and earlier Description The issue allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter in the "FTP-Server field" to the sicore/updates/optionssav...

CVE-2011-0635: Improper Control of Generation of Code

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter FTP-Server field to the sicore/updates/optionssav operation for index.php...

Multiple Vulnerabilities in ReOS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ReOS which could be exploited to perform SQL injection attacks and compromise vulnerable system. 1 SQL injection vulnerabilities in ReOS 1.1 The vulnerability exists due to input sanitation errors in the...

PT-2011-2410

Name of the Vulnerable Software and Affected Versions Joomla! component com allcinevid version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the "index.php" endpoint. Recommendations For version 1.0.0, avo...

PT-2011-2417

Name of the Vulnerable Software and Affected Versions LotusCMS Fraise version 3.0 Description A directory traversal issue exists in the core/lib/router.php file of LotusCMS Fraise. This issue allows remote attackers to include and execute arbitrary local files when the magic quotes gpc setting is...

CVE-2011-0511: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the allCineVid component comallcinevid 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CmsEasp 2.0.0 LFI vulnerability

易通企业网站系统也称易通企业网站程序，是易通公司开发中国首套免费提供企业网站模板的营销型企业网站管理系统，系统前台生成html、完全符合SEO、同时有在线客服、潜在客户跟踪、便捷企业网站模板制作、搜索引擎推广等功能的企业网站系统。 CmsEasp 2.0.0 null http://server/index.php?case=../../../../../../../../../../../../../../../../etc/passwd%00...

Sql injection

Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the 1 filterorder or 2 filterorderDir parameter in a comcontact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this...