CVE-2008-5569: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php or 2 shop/kontakt.php, or 3 shopkundenmgmt.php or 4 SHOPKONFIGURATION.php in shop/Admin/...

CVE-2008-5578: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via 1 the f parameter in a showforum action, 2 the u parameter in a profile action, 3 the viewcat parameter, or 4 a combination of scbuid and scbident...

CadeNix (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================ CadeNix cid Remote SQL Injection Vulnerability ================================================ Remote Sql Injection CadeNix index.php CadeNix Online Games Play Online I am , HaCkeR EgY My...

CVE-2008-5584: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a message, 2 a milestone, or 3 a display name in a profile, or the 4 a or 5 c parameter to index.php...

Aperto Blog 0.1.1 Local File Inclusion / SQL Injection Vulnerabilities

No description provided by source. =========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor :...

Aperto Blog 0.1.1 Local File Inclusion / SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Aperto Blog 0.1.1 Local File Inclusion / SQL Injection Vulnerabilities ======================================================================...

CFAGCMS Remote File Inclusion

Author : BeyazKurt - [email protected] Script : CFAGCMS Download : http://sourceforge.net/project/showfiles.php?groupid=197936 Vuln : Page themes/default/index.php, Line 15-16 : Site.Com/cfagcms/themes/default/index.php?main=SHELL Site.Com/cfagcms/themes/default/index.php?right=SHELL SHQİPTAR!...

Aperto Blog 0.1.1 - Local File Inclusion / SQL Injection

=========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor : http://code.google.com/p/apertoblog/ Download :...

CVE-2008-5577: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the incfunction parameter...

Aperto Blog 0.1.1 - Local File Inclusion SQL Injection

Aperto Blog 0.1.1 - Local File Inclusion SQL Injection =========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor :...

CVE-2008-5570: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Aperto Blog 0.1.1 Local File Inclusion / SQL Injection

=========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor : http://code.google.com/p/apertoblog/ Download :...

Mediatheka 4.2 (index.php lang) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Mediatheka 4.2 index.php lang Local File Inclusion Vulnerability ================================================================== START 0x01 Informations: Script :...

Mediatheka 4.2 (index.php lang) Local File Inclusion Vulnerability

No description provided by source. START 0x01 Informations: Script : Mediatheka 4.2 Download : http://www.hotscripts.com/jump.php?listingid=79106&jumptype=1 Vulnerability : Local File Inclusion Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian Greets: : XaDoS, x0r, emgent,...

PHP Weather 2.2.2 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== PHP Weather 2.2.2 LFI/XSS Multiple Remote Vulnerabilities =========================================================== Lfi/xss script: phpweather-2.2.2 download...

CVE-2008-5490: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5494: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Contact Information Module comcontactinfo component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Feed Cms 1.07.03.19b (lang) Local File Inclusion Vulnerability

No description provided by source. Feed Cms 1.07.03.19 Beta LFI Autore: x0r Email: [email protected] Download: http://heanet.dl.sourceforge.net/sourceforge/feedcms/FeedCms1.07.03.19Beta.rar Bug In: index.php if $GET'lang' $language = $GET'lang'; setcookie'firstlang',$language,time+3600240365;...

Feed CMS 1.07.03.19b - 'lang' Local File Inclusion

Feed Cms 1.07.03.19 Beta LFI Autore: x0r Email: [email protected] Download: http://heanet.dl.sourceforge.net/sourceforge/feedcms/FeedCms1.07.03.19Beta.rar Bug In: index.php if $GET'lang' $language = $GET'lang'; setcookie'firstlang',$language,time+3600240365; header'location:'.$redirect; $lang ...

PHP Multiple Newsletters 2.7 (LFI/XSS) Multiple Vulnerabilities

No description provided by source. Lfi/xss script: PHPMultipleNewsletters v2.7 download from:http://www.phpmultiplenewsletters.com/modules/phpmultiplenewsletters.com/dist/free/PHPMultipleNewslettersv2.7.zip vul:/index.php line 36: include 'language/'..$REQUEST'lang'.'.php'; xpl:...