7218 matches found
phpFaber TopSites Index.PHP Cross-Site Scripting Vulnerability
漏洞信息： phpfaber topsites是一个php编写的功能强大，可靠和安全的排行榜。 phpFaber TopSites存在跨站脚本攻击漏洞。 漏洞影响： phpFaber TopSites 0 漏洞详情： phpFaber TopSites中的index.php存在跨站脚本攻击漏洞。这使得远程攻击者可以借助于page参数注入任意Web脚本或HTML。 可使用以下代码进行漏洞验证： http://www.example.com/index.php?page=alert/sebug/ 解决方案：...
TNT Forum 0.9.4 - Local File Inclusion Vulnerabilities
No description provided by source. ====================================================== TNT Forum 0.9.4 Local File Inclusion Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Aperto Blog 0.1.1 - Local File Inclusion / SQL Injection Vulnerabilities
No description provided by source. =========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor :...
PHP-Nuke Dance Music Module Index.PHP Local File Include Vulnerability
No description provided by source...
PHP Charts 1.0 (index.php, type param) - Remote Code Execution
No description provided by source. !/usr/bin/python Original Advisory came from: http://packetstormsecurity.com/files/119582/PHP-Charts-1.0-Code-Execution.html infodox - insecurety.net import requests import random import threading import sys def genpayloadhost, port: Perl Reverse Shell Generator...
Joomla Component com_spa SQL Injection Vulnerability
No description provided by source. ==================================================== Joomla Component comspa SQL Injection Vulnerability ==================================================== Author : altbta Email : l9athotmaildotcom Homepage : www.xp10.com/xp10 DORK :...
PHP Gamepage SQL Injection Vulnerability
No description provided by source. , | ,---. , . |---. ,---. ,---. ,---. ,---. ,---. , . , | --- | | | | | |---' | | | |---' | | | | ---' ---| ---' ---' ---' ---' ------ ---' V PHP Gamepage SQL Injection Vulnerability --== Author ==-- + Author : v4lc0m87 + Contact : valcom87atgmaildotcom + Group ...
Invision Power Board 1.x Index.php Showtopic Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8575/info Invision Power Board is prone to a cross-site scripting vulnerability. It has been reported that a remote attacker may construct a malicious link to the index.php script and supply arbitrary HTML code as a value...
INCOGEN Bugport 1.x Index.PHP Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16123/info Bugport is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Eclime 1.1.2b Multiple Vulnerabilities
No description provided by source. Vulnerability ID: HTB22705 Reference: http://www.htbridge.ch/advisory/sqlinjectionineclime1.html Product: Eclime Vendor: www.eclime.com http://www.eclime.com/ Vulnerable Version: 1.1.2b Vendor Notification: 16 November 2010 Vulnerability Type: SQL Injection...
Fhimage 1.2.1 - Remote Index Change Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1...
VideoCMS 3.1 - SQL Injection Vulnerability
No description provided by source. VideoCMS SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 14, 2009 Software Information + Vendor : http://www.codemight.com/ + version : 3.1 or lower maybe also affected + Vulnerabilit...
Kmita FAQ 1.0 index.php catid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/18282/info Kmita FAQ is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...
Simplog 0.9.3 BlogID Parameter Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20899/info Simplog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
eroCMS <= 1.4 (index.php site) SQL Injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability eroCMS V1.0 - V1.1 - V1.2 - V1.3 - V1.4 index.php site AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : eroCMS Vesrion : 1.0 - 1.1 - 1.2 - 1.3 - 1.4 site :...
PicoFlat CMS <= 0.4.14 index.php Remote File Inclusion Vulnerability
No description provided by source. PicoFlat CMS Remote file inclusion f0und bY 0in download:http://sourceforge.net/project/showfiles.php?groupid=195156&packageid=230351&releaseid=533796 Greetings to:Dark-coders team members: Die-angel,Slim,Umbro Others: Joker186,Kaja,Wojto111,Rade0n And funny...
LokiCMS <= 0.3.4 (index.php page) Arbitrary Check File Exploit
官网链接: http://www.lokicms.com/ 影响版本：= 0.3.4 概述： LokiCMS 0.3.4及之前版本中的index.php存在目录遍历漏洞。当magicquotesgpc被中止时，远程攻击者可以借助页参数中的".."，来检查任意文件是否存在。 漏洞页面： vuln file: index.php 漏洞代码： if isset $GET && isset $GET'page' $pagename = stripslashes trim $GET'page' ; // load the page if $pagename == '' $name =...
OSCommerce 3.0.2 - Persistent Cross Site Vulnerability
No description provided by source. Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the GNU General Publi...
Noah's Classifieds 1.2/1.3 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14833/info Noah's Classifieds is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query. Successful exploitation could result in a...
CFAGCMS 1- Remote File Inclusion Vulnerabilities
No description provided by source. Author : BeyazKurt - [email protected] Script : CFAGCMS Download : http://sourceforge.net/project/showfiles.php?groupid=197936 Vuln : Page themes/default/index.php, Line 15-16 : ?php include$main;? ?php include$right;?...