CVE-2009-0330: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Simple Content Management System SCMS 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2009-0329: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the PcCookBook compccookbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipeid parameter in a viewrecipe action to index.php, a different vector than CVE-2008-0844...

CVE-2008-6001

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string...

CVE-2008-6001: Undefined Security Weakness

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string...

CVE-2008-5994: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Check Point Connectra NGX R62 HFA01 allows remote attackers to inject arbitrary web script or HTML via the dir parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0299

SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2009-0299

CVE-2009-0299 affects Groone GLinks 2.1. The vulnerability is an SQL injection in index.php via the cat parameter, allowing remote execution of arbitrary SQL commands. Connected sources corroborate the affected software/version and the input parameter exploited, with no explicit exploitation deta...

CVE-2009-0295

The CVE-2009-0295 vulnerability affects Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2. It is a SQL injection in index.php triggered via the id parameter when magic_quotes_gpc is disabled. The underlying issue is improper handling of user-supplied input, allowing remote atta...

Groone's GLink Organizer SQL Injection

Groone's GLink Organizer index.php SQL Injection Vulnerability Author: nuclear download: http://www.groonesworld.com/programs/glinks/glinks.zip vuln: http://localhost/path/index.php?cat=-1 union select 1,@@version,3 %23 greetz Mi4night, cAs, zYzTeM, THEMAN, Pepe, I-O-W-A,Digitalfortress, DiGitalX...

CVE-2009-0295: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Information Technology Light Poll Information ITLPoll 2.7 Stable 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0299: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2009-0286: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the formdatascriptclass parameter...

Groone's GLink Organizer (index.php cat) SQL Injection Vulnerability

No description provided by source. Groone's GLink Organizer index.php SQL Injection Vulnerability Author: nuclear download: http://www.groonesworld.com/programs/glinks/glinks.zip vuln: http://localhost/path/index.php?cat=-1 union select 1,@@version,3 %23 greetz Mi4night, cAs, zYzTeM, THEMAN, Pepe...

CVE-2008-5965: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to check for the existence of arbitrary files via a .. dot dot in the page parameter...

Groones GLink ORGanizer - index.php?cat SQL Injection

Groones GLink ORGanizer - index.php?cat SQL Injection Groone's GLink Organizer index.php SQL Injection Vulnerability Author: nuclear download: http://www.groonesworld.com/programs/glinks/glinks.zip vuln: http://localhost/path/index.php?cat=-1 union select 1,@@version,3 %23 greetz Mi4night, cAs,...

CVE-2008-5967: Improper Authentication

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar aka .ics file with arbitrary content to the calendars/ directory outside the web root...

Sql injection

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-5948

CVE-2008-5948 concerns a directory traversal vulnerability in index.php of BNCwi version 1.04 and earlier. The issue arises when processing the newlanguage parameter, where an attacker can inject a .. path segment to cause local files to be included and (potentially) executed. Impact is partial c...

CVE-2008-5960

Affected software: Tribiq CMS Community 5.0.10B and 5.0.11E. Vulnerability: SQL injection in index.php via the cID parameter in a document action. This allows remote attackers to execute arbitrary SQL commands. Root cause/impact: Not further detailed beyond the injection via cID; impacts confiden...

CVE-2008-5949

Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cctbase parameter to 1 index.php; 2 handle/proxy.php; 3 header.php, 4 include.php, and 5 workspace.php in includes/; and 6 plugins/RSS/files/rss.php...