PT-2010-5397

Name of the Vulnerable Software and Affected Versions Pandora FMS versions 3.1 and earlier Description The issue allows remote attackers to bypass authentication. This is achieved by sending a request to "index.php" with "admin" in the loginhash user parameter, in conjunction with the md5 hash of...

PT-2010-5398

Name of the Vulnerable Software and Affected Versions Pandora FMS versions prior to 3.1.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via two specific API endpoints: "operation/agentes/ver agente" in "ajax.php" using the id group...

CVE-2010-4280: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via 1 the idgroup parameter in an operation/agentes/veragente action to ajax.php or 2 the groupid parameter in an operation/agentes/estadoagente action to index.ph...

CVE-2010-4360

CVE-2010-4360 refers to multiple SQL injection vulnerabilities in Jurpopage 0.2.0, exploitable via the (1) note and (2) pg parameters in index.php, per the initial description and corroborating Red Hat entries. The connected documents confirm the same vulnerability pattern and provide no details ...

PT-2010-5436

Name of the Vulnerable Software and Affected Versions Jurpopage version 0.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the category parameter in the "index.php" file. Recommendations For Jurpopage version 0.2.0, update to a newer versio...

PT-2010-5437

Name of the Vulnerable Software and Affected Versions Jurpopage version 0.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the note and pg parameters in the "index.php" file. Recommendations For Jurpopage version 0.2.0, consider restricting...

CVE-2010-4360: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 note and 2 pg parameters, different vectors than CVE-2010-4359. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2010-4359: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands via the category parameter...

ecshop v2. 7 2 demo/index. php file getshell vulnerabilities-vulnerability warning-the black bar safety net

//------------------------------------------------------------- Release date: 2010-11. 2 6 Publishing author: xhming Affected version: ecshop v2. 7 2 Official address: Vulnerability type: code execution Vulnerability description: Vulnerability analysis: demo/index.php if ! empty$POST'lang'...

C&PR Studio <= (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== C&PR Studio Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Memb...

Voxpopulime CMS <= (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Voxpopulime CMS Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout...

Sql injection

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

CVE-2010-4298

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

C&PR Studio SQL Injection

================================================================ C&PR Studio Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Voxpopulime CMS SQL Injection

================================================================ Voxpopulime CMS Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

PT-2010-5163

Name of the Vulnerable Software and Affected Versions vtiger CRM versions prior to 5.2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML, related to multiple cross-site scripting XSS vulnerabilities. This can be achieved via the username field or the password...

PT-2010-5406

Name of the Vulnerable Software and Affected Versions Free Simple Software version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the downloads id parameter in a "download now" action to "index.php". Recommendations For Free Simple Softwa...

CVE-2010-3911: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via 1 the username aka defaultusername field or 2 the password field in a Users Login action to index.php, or 3 the label parameter in a Settings GetFieldInfo...

CVE-2010-4298: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

Pecio CMS 'target' Parameter Cross Site Scripting Vulnerability

The host is running Pecio CMS and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbpeciocmsxssvuln.nasl 5794 2017-03-30 13:52:29Z cfi $ pecio cms 'target' Parameter Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...