11754 matches found
CVE-2008-0385
Urulu 2.1 contains a SQL injection in the connectionId parameter of index.php via PATH_INFO (statprt/js/request or dyn/js/request). The vulnerability allows remote attackers to extract data from the database, with potential for arbitrary code execution if the database user has FILE privileges (e....
Dream4 Koobi CMS 4.3.0 4.2.3 - categ SQL Injection
Dream4 Koobi CMS 4.3.0 4.2.3 - categ SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0 - 4.2.3 index.php categ Remote SQL Injection +==--...
CVE-2008-1077: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the Simpleboard comsimpleboard 1.0.3 Stable component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action...
Dream4 Koobi CMS 4.3.0 < 4.2.3 - 'categ' SQL Injection
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0 - 4.2.3 index.php categ Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys ...
CVE-2008-1075: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search command. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 Vert/index.php, 2 Noir/index.php, and 3 Bleu/index.php in template/, different vectors than CVE-2008-0645...
Koobi Pro 5.7 (categ) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================== Koobi Pro 5.7 categ Remote SQL Injection Vulnerability ======================================================== + Koobi Pro 5.7 index.php categ Remote Sql Inj. Vuln +...
CVE-2008-1063: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability index.php in the XM-Memberstats xmmemberstats module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter...
CVE-2008-1068: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 Vert/index.php, 2 Noir/index.php, and 3 Bleu/index.php in template/, different vectors than CVE-2008-0645...
CVE-2008-1065: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats xmmemberstats 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the 1 letter or 2 sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
Sql injection
SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbcatid parameter...
CVE-2008-1050
CVE-2008-1050 describes an SQL injection in Softbiz Jokes & Funny Pics Script, affecting the index.php file and exploitable via the sbcat_id parameter. The vulnerability allows remote attackers to alter/ retrieve data by injecting arbitrary SQL commands. The NVD entry assigns a base score of 7.5 ...
CVE-2008-1050: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbcatid parameter...
Softbiz jokes and funny pictures (index.php) sql injection
Script:Softbiz jokes & funny pictures Author:-=Mizo=- Dork:inurl:/index.php?sbcatid= Exploit:/index.php?sbcatid=-1 union select 0,1,2,concatsbadminname,0x3a,sbadminpwd,4,5,6,7,8,9 from sbjksadmin/ Admin cpanel:/path/admin Greetz: L!0n - Redcasper - SoSo H H - DC - Iraqistrike - Crackman - B0rizQ ...
Powered by Pagetool Ver (1.04-05-06-07)
Google arama : www.1923turk.org Turkishwariorr Powered by Pagetool Ver 1.04 Powered by Pagetool Ver 1.07 Powered by Pagetool Ver 1.05 Powered by Pagetool Ver 1.06 Site sonuna :...
Sql injection
Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...
CVE-2008-0936: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...
CVE-2008-0939: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...
Vulnerabilities in Scuttle
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в Scuttle. Уязвимости в разделе bookmarks и в скрипте index.php в параметре sort. XSS: http://site/bookmarks/3CBODY20onload=alertdocument.cookie3E http://site/?sort=223E3Cscript3Ealertdocument.cookie3C/script3E...
Joomla Component simple shop 2.0 SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================ Joomla Component simple shop 2.0 SQL Injection Vulnerability ============================================================ joomla comsimpleshop SQL Injectionsection DORK 1 :...