Scribe 0.2 - 'index.php' Local File Inclusion

scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter aka the message text area, which leads to an injection in the messenger during private message PM preview. NOTE: some of these details...

Sql injection

SQL injection vulnerability in index.php in the comiomezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action...

CVE-2008-0765

Multiple cross-site scripting XSS vulnerabilities in artmedic webdesign weblog allow remote attackers to inject arbitrary web script or HTML via the 1 date parameter to artmedicprint.php and the 2 jahrneu parameter to index.php...

CVE-2008-0762

CVE-2008-0762 is a SQL injection vulnerability affecting Joomla! in the com_iomezun component (index.php) where the id parameter in an edit action can be tampered to execute arbitrary SQL commands. The NVD entry reports a CVSS v2 base score of 7.5 (HIGH) with network attack vector and low complex...

CVE-2008-0757

The CVE-2008-0757 entry documents a Cross-site Scripting (XSS) vulnerability in MercuryBoard 1.1.5, specifically in index.php where the message parameter (the message text area) can be exploited to inject arbitrary web script or HTML. The issue can lead to an injection during Private Message (PM)...

CVE-2008-0749

CVE-2008-0749 is a Cross-site Scripting (XSS) vulnerability in Calimero.CMS 3.3, exploitable via the id parameter in the calimero_webpage action of index.php. The NVD entry states the vulnerability can allow an attacker to inject arbitrary script/HTML, with the impact on confidentiality: none, in...

CVE-2008-0752: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Neogallery comneogallery 1.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show action...

CVE-2008-0749: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a calimerowebpage action...

CVE-2008-0745: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0772: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the comdoc component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the sid parameter in a view task...

CVE-2008-0754: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe comrapidrecipe 1.6.5 component for Joomla! allow remote attackers to execute arbitrary SQL commands via 1 the userid parameter in a showuser action or 2 the categoryid parameter in a viewcategorysrecipes action...

Joomla! Component xfaq 1.2 - 'aid' SQL Injection

joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT :...

Joomla! Component xfaq 1.2 - aid SQL Injection

Joomla! Component xfaq 1.2 - aid SQL Injection joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT ...

CVE-2008-0762: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the comiomezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action...

CVE-2008-0733: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

CVE-2008-0761: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Prince Clan Chess Club compcchess 0.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a players action...

CVE-2008-0746: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Gallery comgallery component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

CVE-2008-0757: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter aka the message text area, which leads to an injection in the messenger during private message PM preview. NOTE: some of these details...