7218 matches found
Back-End CMS 0.4.5 admin/index.php includes_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary...
Dream4 Koobi CMS 4.2.3 Index.PHP Q Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13413/info Koobi CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
Oxynews Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17132/info Oxynews is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...
Webmobo WB News System Blind SQL Injection
No description provided by source. Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable Page:...
Vtiger CRM 5.4.0 (index.php, onlyforuser param) - SQL Injection
No description provided by source...
CascadianFAQ <= 4.1 (index.php) Remote SQL Injection Vulnerability
No description provided by source. Title : CascadianFAQ = 4.1 index.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://eclectic-designs.com $$ : Free Dork : This FAQ is powered by CascadianFAQ DorkEx :...
Drumbeat CMS 1.0 - SQL Injection Exploit
No description provided by source. Vendor: http://www.drumbeatcms.com.au/ Version: Version 1.0 Tested on: Windows and Linux ----------------------------------------- Drumbeat CMS SQL Injection Exploit + Discovered and notified by Sora A SQL injection exploit is found in Drumbeat CMS. The...
Drake CMS 0.2 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source...
Invision Power Services Invision Gallery 1.0.1/1.3 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13907/info Invision Gallery is affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script before using it in an SQL...
bild flirt system 2.0 - index.php - (id) SQL Injection Vulnerability
No description provided by source...
ConfTool 1.1 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source...
blogBuddies 0.3 index.php u Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15555/info blogBuddies is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to hav...
CMS little (index.php term) 0.0.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w ========================================================== CMS little index.php term Remote SQL Injection Exploit ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...
AllMyLinks <= 0.5.0 - (index.php) Remote File Include Vulnerability
No description provided by source. /\ AllMyLinks 0.5.0 ========================================================= Published : 2007-01-07 Remote: Yes Site: http://download.php-resource.net/AllMyLinks/AllMyLinks0.5.0.zip Author: GolDM Contact: [email protected]...
Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities
No description provided by source. Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID:...
PHPNuke 6.x Category Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9630/info It has been reported that PHPNuke may prone to a SQL injection vulnerability, due to insufficient sanitization user-supplied input. The problem is reported to exist in the $category variable contained within the...
Cype CMS SQL Injection Vulnerability
No description provided by source. Exploit Title: Cype Content Management System Remote SQL Injection Exploit Date: January 1st, 2010 Author: Sora Version: Revision 241 Tested on: Linux Backtrack 3 ----------------------------------------- Cype CMS Remote SQL Injection Exploit Author: Sora Contac...
PHPList <= 2.10.2 GLOBALS[] Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHPList = 2.10.2 GLOBALS remote cmmnds xctn \r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - this works against registerglobals=On \r\n; echo a dork:...
Dream4 Koobi CMS 4.2.3 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from urlparse import urljoin class TestPOCPOCBase: vulID = 'SSV-78938' vul ID version = '1' author = 'hzr' vulDate =...
3editor CMS <= 0.42 (index.php) Local File Include Vulnerability
No description provided by source. script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page'...