yappang-lfi.txt

o------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : yappa-ng Version 2.3.2 | | Vendor :...

CVE-2008-4611: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter...

CVE-2008-4604

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-4604

CVE-2008-4604 affects Easy CafeEngine 1.1. Affected component: index.php. Vulnerability: SQL injection in the itemid parameter in index.php, enabling remote execution of arbitrary SQL commands. Root cause: improper sanitization of input leading to SQL injection. Impact as stated by sources: parti...

CVE-2008-4602: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. dot dot in the md parameter...

CVE-2008-4604: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Directory traversal

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

CVE-2008-4592: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

PHP Easy Downloader 1.5 - 'file' File Disclosure

::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit: http://www.target.com/phpeasydownloader/index.php?file=index.php milw0rm.com...

Kure 0.6.3 - 'index.php' Local File Inclusion

Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability url: http://code.google.com/p/kure/downloads/list Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

CVE-2008-4570

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-4570

CVE-2008-4570 describes an SQL injection in Real Estate Classifieds: index.php vulnerable via the cat parameter, allowing remote SQL commands. Affected software/component: Real Estate Classifieds (index.php). Root cause: improper input handling enabling injected SQL. Impact (per NVD): partial con...

CVE-2008-4570: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Real Estate Classifieds 'index.php' SQL注入漏洞

BUGTRAQ ID: 31723 CNCAN ID：CNCAN-2008101408 Real Estate Classifieds是一款基于PHP的WEB应用程序。 Real Estate Classifieds不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'cat'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Real Estate Scripts Real Estate Classifieds 目前没有解决方案提供：...

Real Estate Scripts 2008 (index.php cat) SQL Injection Vulnerability

No description provided by source. Author : EgY Coders TM Hakxer Home : Www.educ-up.com Type Gap : SQL INJECTION script : Real-Estate-Scripts see script http://www.real-estate-scripts.com/demo.html Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 ,Bright...

res-sql.txt

Author : EgY Coders TM Home : Www.educ-up.com Type Gap : SQL INJECTION script : Real-Estate-Scripts see script http://www.real-estate-scripts.com/demo.html Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 ,Bright D@rk + Bug in : index.php POC...

LokiCMS <= 0.3.4 (index.php page) Arbitrary Check File Exploit

Exploit for unknown platform in category web applications ============================================================== LokiCMS = 0.3.4 index.php page Arbitrary Check File Exploit ============================================================== LokiCMS = 0.3.4 index.php page Arbitrary Check File...

My PHP Indexer 1.0 - index.php Local File Download

My PHP Indexer 1.0 - index.php Local File Download My PHP Indexer 1.0 index.php Local File Download Vulnerability url: http://sourceforge.net/projects/myphpindexer/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for...