11818 matches found
CVE-2008-3250
The CVE-2008-3250 entry describes a SQL injection in Arctic Issue Tracker 2.0.0, exploitable through the filter parameter in index.php to remotely execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH). No specific patch/version details or exploits are provided in ...
CVE-2008-3250: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL commands via the filter parameter...
CVE-2008-3240: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action...
Aprox CMS Engine 5.1.0.4 (index.php page) SQL Injection Vulnerability
No description provided by source...
Aprox CMS Engine 5.1.0.4 (index.php page) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Aprox CMS Engine 5.1.0.4 index.php page SQL Injection Vulnerability ===================================================================== Viva IslaM Viva IslaM Remote SQ...
preCMS v.1 (index.php page) Remote SQL injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
Cross-Site Scripting vulnerabilities in CNCat
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в CNCat. XSS: Уязвимости в add.php можно как через GET, так и через POST, search.php и index.php. http://site/add.php?description=3C/textarea3E3Cscript3Ealertdocument.cookie3C/script3E...
Aprox CMS Engine 5.1.0.4 - index.php SQL Injection
Aprox CMS Engine 5.1.0.4 - index.php SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability Aprox CMS Engine V5.1.0.4 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
Aprox CMS Engine 5.1.0.4 - 'index.php' SQL Injection
Viva IslaM Viva IslaM Remote SQL injection Vulnerability Aprox CMS Engine V5.1.0.4 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
precms-sql.txt
Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
CVE-2008-3213: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information...
CVE-2008-3201
CVE-2008-3201 involves multiple XSS vulnerabilities in Pagefusion 1.5. The issues affect index.php in Pagefusion 1.5, where unsanitized user input via the edit action can be injected through five parameters: acct_fname, acct_lname, PID, PGID, and rez. The underlying cause is insufficient input sa...
CVE-2008-3201
Multiple cross-site scripting XSS vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 acctfname and 2 acctlname parameters in an edit action, and the 3 PID, 4 PGID, and 5 rez parameters. NOTE: the provenance of this information is...
CVE-2008-3202: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the currenturl parameter in a tellafriend action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...
preCMS v.1 (index.php page) Remote SQL injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== preCMS v.1 index.php page Remote SQL injection Vulnerability ============================================================== Viva IslaM Viva IslaM Remote SQL injection...
preCMS 1 - 'index.php' SQL Injection
Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
preCMS 1 - index.php SQL Injection
preCMS 1 - index.php SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability preCMS v.1 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
CVE-2008-3201: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 acctfname and 2 acctlname parameters in an edit action, and the 3 PID, 4 PGID, and 5 rez parameters. NOTE: the provenance of this information is...
CVE-2008-3205: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the c parameter...