Etomite CMS id Paramater SQL Injection

The remote web server contains a PHP script that is affected by a SQL injection vulnerability. Description: The remote web server is running Etomite CMS, a PHP-based content management system. The version of Etomite CMS installed on the remote host fails to sanitize input to the 'id' parameter...

CVE-2008-4739: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in PlugSpace 0.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the navi parameter...

MindDezign Photo Gallery 2.2 (index.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= MindDezign Photo Gallery 2.2 index.php id SQL Injection Vulnerability =======================================================================...

MindDezign Photo Gallery 2.2 - SQL Injection

================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

CVE-2008-4707: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized directories via a .. dot dot in the lien2 parameter...

CVE-2008-4715: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Jpad comjpad 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php...

CVE-2008-4675

CVE-2008-4675: SQL injection in PHPcounter 1.3.2 and earlier via the name parameter in index.php. Root cause: unsanitized input leading to arbitrary SQL execution. Affected: PHPcounter 1.3.2 and older. Impact: remote attacker can run arbitrary SQL commands. Exploitation details are not provided i...

Sql injection

SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-4675: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-4674: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to execute arbitrary SQL commands via the catid parameter in browse mode...

CVE-2008-4648

CVE-2008-4648 is a Cross-site Scripting (XSS) vulnerability in Elxis CMS 2008.1 revision 2204. The issue allows remote attackers to inject arbitrary web script or HTML through the following request parameters: PATH_INFO, option, Itemid, id, task, bid, and contact_id. Notes indicate the flaw may o...

Directory traversal

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4648: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO or the 2 option, 3 Itemid, 4 id, 5 task, 6 bid, and 7 contactid parameters. NOTE: the error might be located in...

CVE-2008-4627: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board WBB allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php...

CVE-2008-4626: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4647: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-4632: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magicquotesgpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. dot dot in the 1 post and 2 doc parameters...

Wysi Wiki Wyg 1.0 (LFI/XSS/PHPInfo) Remote Vulnerabilities

No description provided by source. / Wysi Wiki Wyg 1.0 LFI,XSS,PHPInfo Remote Vulnerabilities ---------------------------------------------------------- By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/wysiwikiwyg10.zip ---------------------------------------------------------- 1-...

CVE-2008-4611

SQL injection vulnerability in index.php of PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter. Connected sources do not specify affected versions, exact impact, or remediation. No exploitation details are provided in the documents.

Wysi Wiki Wyg 1.0 - Local File Inclusion Cross-Site Scripting PHPInfo

Wysi Wiki Wyg 1.0 - Local File Inclusion Cross-Site Scripting PHPInfo / Wysi Wiki Wyg 1.0 LFI,XSS,PHPInfo Remote Vulnerabilities ---------------------------------------------------------- By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/wysiwikiwyg10.zip...