11752 matches found
CVE-2008-0820: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTML via $SERVER'PHPINFO'. NOTE: the vendor disputes this issue in a followup, stating that the affected variable is $SERVER'PHPSELF', and "This is not an Etomite...
PT-2008-2438 · Etomite · Etomite
Name of the Vulnerable Software and Affected Versions: Etomite version 0.6.1.4 Final Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. The issue is disputed by the vendor, who claims the affected variable is $ SERVER'PHP SELF' and states...
CVE-2008-0818: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie to 1 comment.php, 2 index.php, and 3 show.php...
CVE-2008-0812: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. dot dot in the action parameter...
CVE-2008-0822: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...
banpro-lfi.txt
banpro-dms 1.0 local file inclusion vulnerability download http://sourceforge.net/projects/banprodms author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/DMS/index.php?action=../../../../../../../../../../etc/passwd%00...
Joomla Component com_clasifier (cat_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Joomla Component comclasifier catid SQL Injection Vulnerability =================================================================== joomla SQL Injectioncomclasifier DORK 1...
joomlasched-sql.txt
joomla SQL Injection comscheduling AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comscheduling DORK 2 : allinurl: EXPLOIT :...
CVE-2008-0801
The CVE-2008-0801 entry describes an SQL injection in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo/Joomla!, exploitable remotely via (1) iid in a view action and possibly (2) userid parameter. Affected software is PAXXGallery 0.2 for Mambo/Joomla!; root cause is improper sanitization...
CVE-2008-0802
CVE-2008-0802 describes a SQL injection in Joomla!’s MediaSlide component, specifically in the com_mediaslide 0.5 version, where the vulnerability is triggered via the albumnum parameter in a contact action. The underlying issue is an unsafely constructed SQL query that allows remote attackers to...
CVE-2008-0799: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the Quiz comquiz 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...
CVE-2008-0795: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the MGFi XfaQ comxfaq 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...
joomla "com_omnirealestate" S@L Injection
AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ dork 2= allinurl: "comomnirealestate" index.php?option=comomnirealestate&Itemid=0&func=showObject&info=contact&objid=-9999//union//select//username,password//from//mosusers/&results=S@BUN...
CVE-2008-0801: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the PAXXGallery compaxxgallery 0.2 component for Mambo and Joomla! allow remote attackers to execute arbitrary SQL commands via 1 the iid parameter in a view action, and possibly 2 the userid parameter...
CVE-2008-0802: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the MediaSlide commediaslide 0.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the albumnum parameter in a contact action...
CVE-2008-0783
Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via 1 the viewtype parameter to graph.php; 2 the filter parameter to graphview.php; 3 the action parameter to the drawnavigationtext...
CVE-2008-0785
Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the 1 graphlist parameter to graphview.php, 2 leafid and id parameters to tree.php, 3 localgraphid parameter to graphxport.php, and 4...
Joomla Component xfaq 1.2 (aid) Remote SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MA陌L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT :...
Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= Scribe = 0.2 index.php page Local File Inclusion Vulnerability ================================================================= scribe 0.2 local file inclusion vulnerabilit...
CVE-2008-0785: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the 1 graphlist parameter to graphview.php, 2 leafid and id parameters to tree.php, 3 localgraphid parameter to graphxport.php, and 4...