CVE-2008-4184: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitrary web script or HTML via the patron parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4186: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the iddoc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page pageid parameter...

CVE-2008-4159

CVE-2008-4159 concerns an SQL injection in index.php used by Jaw Portal and Zanfi CMS lite. The vulnerability permits remote attackers to execute arbitrary SQL commands through the pageid parameter, as described in the CVE entry. Affected software/components are specifically Jaw Portal's index.ph...

Invision Power Board < 2.3.6 index.php name Parameter SQL Injection

Binary data 4686.prm...

CVE-2008-4159: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page pageid parameter...

CVE-2008-4158: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 flag and 2 inc parameters...

Diesel Pay Script (area) Remote SQL Injection Vulnerability

No description provided by source. Diesel Pay Script index.php area sql inj http://www.dieselscripts.com ---------------------------------------------------------- Discovered By: ZoRLu Date: 20.09.2008 contact: [email protected] contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMD...

Netartmedia Real Estate Portal 1.2 - SQL Injection

Netartmedia Real Estate Portal 1.2 - SQL Injection !R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC:...

Netartmedia Real Estate Portal 1.2 - SQL Injection

!R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC: /index.php?mod=research&ad=-666 union select...

Plaincart 1.1.2 - p SQL Injection

Plaincart 1.1.2 - p SQL Injection . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE...

Plaincart 1.1.2 - 'p' SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

Diesel Pay Script - area SQL Injection

Diesel Pay Script - area SQL Injection Diesel Pay Script index.php area sql inj http://www.dieselscripts.com ---------------------------------------------------------- Discovered By: ZoRLu Date: 20.09.2008 contact: [email protected] contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI...

CVE-2008-4155

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...

CVE-2008-4155: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...

CVE-2008-4144: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

proactive-lfi.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...

Gonafish LinksCaffePRO 4.5 (index.php) SQL Injection Vulnerability

No description provided by source. /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Gonafish LinksCaffePRO 4.5 index.php SQL...

gonafish-sql.txt

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Gonafish LinksCaffePRO 4.5 index.php SQL Injection Vulnerability Vendor:...

Gonafish LinksCaffePRO 4.5 (index.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Gonafish LinksCaffePRO 4.5 index.php SQL Injection Vulnerability ================================================================== /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ ...