CVE-2008-2907: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the eml parameter...

mUnky 0.0.1 (index.php zone) Local File Inclusion Vulnerability

No description provided by source. ================================================================================ | | | | | | | | | | | | | | | ' | | '/ | | || | | |/ \ | | | | | | | | | |...

Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability

No description provided by source. =========================================================== Keller Web Admin CMS Local File Inclusion Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

Directory traversal

Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Sql injection

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

CVE-2008-2891

CVE-2008-2891 corresponds to a SQL injection in the PHP script implementing eMuSOFT’s emuCMS 0.3. The vulnerability is triggered via the cat_id parameter in a category action within index.php, allowing remote attackers to execute arbitrary SQL commands. The core issue is improper input handling i...

CVE-2008-2887

The CVE-2008-2887 entry describes a directory traversal in index.php of chaozz@work FubarForum 1.5 that allows remote attackers to include and execute arbitrary local files via a .. in the page parameter. Affected software: FubarForum 1.5 (chaozz@work). Root cause: improper handling of page param...

CVE-2008-2897

CVE-2008-2897 describes a SQL injection in PageSquid CMS 0.3 Beta, where the vulnerability is in index.php via the mass-assignable? page parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 ( HIGH ), with access over network and n...

CVE-2008-2895: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2896: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

OTManager CMS 24a - Local File Inclusion Cross-Site Scripting

OTManager CMS 24a - Local File Inclusion Cross-Site Scripting =========================================================== OTManager CMS LFI/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| -------...

CVE-2008-2887: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2891: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

CVE-2008-2897: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjokeid parameter, a different vector than CVE-2008-1050...

CVE-2008-2875

SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL commands via the hal parameter...

Directory traversal

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

CVE-2008-2876

CVE-2008-2876 affects the web app mUnky version 0.0.1 . The vulnerability is a directory traversal in index.php that allows an attacker to cause local file inclusion via a .. in the zone parameter, enabling arbitrary local file access/execution according to the entry. The CVSS metrics in the init...

CVE-2008-2876: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, |...