CVE-2008-3192: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2008-3185

Relative Real Estate Systems 3.0 and earlier are affected by an SQL injection in index.php, exploitable via the listing_id parameter in a listings action. Remote attackers can execute arbitrary SQL commands as described in CVE-2008-3185 records (NVD, CVE list). The connected documents provide vul...

CVE-2008-3185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listingid parameter in a listings action...

WebCMS Portal Edition 'index.php' SQL注入漏洞

BUGTRAQ ID: 30204 CNCAN ID：CNCAN-2008071502 WebCMS Portal Edition是一款基于PHP的WEB应用程序。 WebCMS Portal Edition不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 WebCMS Portal Edition 目前没有解决方案提供： http://www.webcms.es/...

WebCMS Portal Edition (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= WebCMS Portal Edition id Remote SQL Injection Vulnerability ============================================================= Viva IslaM Viva IslaM Remote SQL InjEcti0n Vulnerabilit...

Wysi Wiki Wyg 1.0 (index.php c) Local File Inclusion Vulnerability

No description provided by source. --==+=========================================================+==-- --==+ Wizi Wiki Wig Local File Inclusion Vulnerability +==-- --==+=========================================================+==-- Discovered By: StAkeR [email protected] Discovered On: 10 Jul 200...

WebCMS Portal Edition - id SQL Injection

WebCMS Portal Edition - id SQL Injection Viva IslaM Viva IslaM Remote SQL InjEcti0n Vulnerability WebCMS Portal index.php menu AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS Name : WebCMS Portal Site : www.webcms.es -:: L!VE DEMO ::-...

Joomla! Component n-forms 1.01 - Blind SQL Injection

Joomla! Component n-forms 1.01 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambot Component n-forms Blind SQL Injection Exploit \n"; print " Author:The Moorish :D \n"; print "...

Sql injection

SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3154

SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3154

SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3154: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3150: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in 1 usb and 2 delpag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the 1 foreignkeyvalue parameter in the news page and 2 webpage parameter in the webpagemultiedit form...

CVE-2008-3129

Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the 1 foreignkeyvalue parameter in the news page and 2 webpage parameter in the webpagemultiedit form...

CVE-2008-3130

CVE-2008-3130 involves multiple cross-site scripting (XSS) vulnerabilities in OpenCart 0.7.7. The issue resides in index.php where the (1) firstname and (2) search parameters can be crafted to inject arbitrary web script or HTML. This describes a client-side injection vulnerability that could aff...

Sql injection

SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3124

CVE-2008-3124 : A SQL injection vulnerability exists in index.php of Mole Group Hotel Script 1.0, allowing remote attackers to inject arbitrary SQL commands via the file parameter. Affected software is Mole Group Hotel Script 1.0 (index.php). The vulnerability enables partial confidentiality, int...

CVE-2008-3119

CVE-2008-3119 affects DreamPics Builder. The vulnerability is an SQL injection in index.php, exploitable via the page parameter, allowing remote attackers to execute arbitrary SQL commands. The sources consistently describe this as a SQL injection flaw but do not specify affected versions, patche...