CVE-2008-5271

CVE-2008-5271 describes a Cross-site scripting (XSS) vulnerability in the SyndeoCMS 2.6.0 package (index.php) where the section parameter can be exploited to inject arbitrary web script/HTML. The cited sources confirm the vulnerability exists in SyndeoCMS 2.6.0 and indicate remote exploitation po...

CVE-2008-5269

The connected records confirm a concrete vulnerability: in pSys 0.7.0 alpha, SQL injection permits remote attackers to execute arbitrary SQL via the shownews parameter in index.php. The root cause is unsanitized input leading to database command execution. Impact is partial confidentiality/integr...

TxtBlog (index.php m) Local File Inclusion Vulnerability

No description provided by source. ============================================================ TxtBlog index.php m Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Undergroun...

Basic PHP CMS (index.php id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Basic PHP CMS index.php id Blind SQL Injection Vulnerability ==============================================================...

CVE-2008-5269: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands via the shownews parameter...

CVE-2008-5271: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

Turnkey Arcade Script (id) Remote SQL Injection Vulnerability

No description provided by source. ----------------Mor0ccan Nightmares---------------- ------------------------------ Script: Turnkey Arcade Script- ------------------------------ ----------------------------------- Site: http://www.turnkeyarcade.com- -----------------------------------...

CVE-2008-5265: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the modulo parameter...

BaSiC-CMS (index.php r) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== BaSiC-CMS index.php r Remote SQL Injection Vulnerability ========================================================== Remote SQL Injection Vulnerability BaSiC-CMS index.php r AuTh0r ...

TxtBlog (index.php m) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== TxtBlog index.php m Local File Inclusion Vulnerability ======================================================== ============================================================ TxtBlog...

BaSiC-CMS index.php r Remote SQL Injection Vulnerability

BaSiC-CMS index.php r Remote SQL Injection Vulnerability. CVE-2008-2789. Webapps exploit for php platform Viva IslaM Viva IslaM Remote SQL Injection Vulnerability BaSiC-CMS index.php r AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : BaSiC-CMS site :...

Turnkey Arcade Script (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Turnkey Arcade Script id Remote SQL Injection Vulnerability =============================================================...

TxtBlog 1.0 Alpha - Local File Inclusion

TxtBlog 1.0 Alpha - Local File Inclusion ============================================================ TxtBlog index.php m Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

jamitjob-sql.txt

■ Jamit Job Board v.3 index.php showemp ☻ AuToR: XaDoS Contact M&: xados at hotmail dot it Site: www.securitycode.it B§g: Blind $ql inJection SIte vuln: http://www.jamit.com ☻ \ Str0ke ThcMarJuana WiLLiam S. Burroughs LiLiTh You Ar& Mi!nE! /...

chipmunkguestbook-sqlxss.txt

--------------------------------------------------------- Portal Name: Chipmunk Guestbook Vendor : http://www.chipmunk-scripts.com/page.php?ID=13 Download : http://www.chipmunk-scripts.com/guestbook/guestbooks.zip Vulnerable File's : index.php Dork: Powered by c Chipmunk Guestbook Author :...

Sql injection

SQL injection vulnerability in the MambAds commambads component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the macat parameter in a view action to index.php, a different vector than CVE-2007-5177...

CVE-2008-5223

The CVE-2008-5223 issue affects Airvae Commerce 3.0 via a SQL injection in index.php, exploitable through the pid parameter. The vulnerability is evidenced by multiple references (NVD/NIST, CVE listings) and classed with a high base score (7.5) under CVSSv2: NETWORK attack vector, LOW attack comp...

CVE-2008-5223: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-5226: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MambAds commambads component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the macat parameter in a view action to index.php, a different vector than CVE-2007-5177...

CVE-2008-5217

Vulnerability context (CVE-2008-5217) : A directory traversal flaw affects the PHP-based CMS txtCMS 0.3 in index.php when PHP is configured with register_globals enabled and magic_quotes_gpc disabled. An attacker can manipulate the id parameter with a .. sequence to cause local file inclusion and...