CVE-2008-2961: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrary local files via a .. dot dot in the 1 path and 2 p parameter...

CVE-2008-2989: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary SQL commands via the go parameter...

CMS little 0.0.1 - template Local File Inclusion

CMS little 0.0.1 - template Local File Inclusion ====================================================================== CMS little index.php template Local File Inclusion Vulnerability ====================================================================== ,--^----------,--------,-----,-------^--,...

php-Agenda 2.2.4 (index.php page) Local File Inclusion Vulnerability

No description provided by source. @===========================================@ | Author = StAkeR [email protected] | @===========================================@ + @==========================================================================@ | Simple PHP Agenda = 2.2.4 Local File Inclusion...

CMS little (index.php template) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== CMS little index.php template Local File Inclusion Vulnerability ================================================================== ,--^----------,--------,-----,-------^--...

CVE-2008-2983: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2972: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the catid parameter in a comment action...

CMS little 0.0.1 - 'template' Local File Inclusion

====================================================================== CMS little index.php template Local File Inclusion Vulnerability ====================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

CVE-2008-2970: Improper Input Validation

Multiple session fixation vulnerabilities in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by setting the PHPSESSID parameter to 1 index.php and 2 login.php in homepg/...

CVE-2008-2963: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the 1 view parameter to a index.php, and the 2 id parameter to b member.php and c post.php...

CVE-2008-2962: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or HTML via the 1 s and 2 sort parameters to index.php, and the 3 id parameter to post.php...

PHP-Agenda 2.2.4 - index.php Local File Inclusion

PHP-Agenda 2.2.4 - index.php Local File Inclusion @===========================================@ | Author = StAkeR [email protected] | @===========================================@ + @==========================================================================@ | Simple PHP Agenda = 2.2.4 Local File...

php-Agenda 2.2.4 (index.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== php-Agenda 2.2.4 index.php page Local File Inclusion Vulnerability ==================================================================== @=============email protected |...

Joomla! Component mygallery - cid SQL Injection

Joomla! Component mygallery - cid SQL Injection H-T Team HouSSamix & ToXiC350 ===================================================================== Joomla Component mygallery Remote SQL Injection Exploit ===================================================================== AUTHOR : HouSSamix From...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 contenido, 2 Belang, and 3 username parameters...

Directory traversal

Directory traversal vulnerability in func.php in Devalcms 1.4a, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currentpath parameter, in conjunction with certain ... triple dot and ..... sequences in the currentfile...

Sql injection

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-2921

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-2921: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-2911: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 contenido, 2 Belang, and 3 username parameters...