CVE-2011-4830

Multiple cross-site scripting XSS vulnerabilities in the comlisting component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the 1 listingtitle, 2 description, 3 homeurl aka Website Address, 4 paystring aka Payment types...

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS allow remote attackers to inject arbitrary web script or HTML via the 1 SITENAME parameter to adminindex.php, or the 2 return and 3 search parameters to index.php. NOTE: some of these details a...

Joomla! Component com_qcontacts 1.0.6 - SQL Injection

Exploit Title: QContacts 1.0.6 Joomla component SQL injection Google Dork: inurl:"/components/comqcontacts/" Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://www.latenight-coding.com/joomla-addons/qcontacts.html Version: 1.0.6 Tested on: Apache Vulnerability: This...

Joomla component com_qcontacts 1.0.6 SQL injection

Exploit for php platform in category web applications Exploit Title: QContacts 1.0.6 Joomla component SQL injection Google Dork: inurl:"/components/comqcontacts/" Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://www.latenight-coding.com/joomla-addons/qcontacts.html...

CVE-2011-4541

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

CVE-2011-4541

The CVE-2011-4541 entry concerns Hastymail2 (version 2.1.1 prior to RC2) and is caused by a cross-site scripting (XSS) vulnerability in index.php where an attacker can inject script/HTML via the rs parameter in the mailbox Drafts action. Public references in NVD and CVE listings confirm the impac...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php in a 1 teachers.html or 2 teachers/ action...

Hastymail 'rs' and 'rsargs[]' Parameters Remote Code Injection Vulnerabilities

The host is running Hastymail2 and is prone to remote code injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodhastymail2rsparamremotecodeinjvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ Hastymail 'rs' and 'rsargs' Parameters Remote Code Injection Vulnerabilities Authors: Sooraj KS...

CVE-2010-5051

Cross-site scripting XSS vulnerability in admin/core/adminfunc.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php...

Sql injection

SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-5061

The CVE-2010-5061 entry describes a SQL injection vulnerability in RSStatic’s index.php, exploitable via the maxarticles parameter. The underlying issue is improper handling of user-supplied input, allowing remote attackers to execute arbitrary SQL commands. Impact is described as partial confide...

CVE-2010-5059

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action...

phpcms 2008 index.php 跨站脚本攻击漏洞

No description provided by source...

phpMyAdmin Setup Interface Cross Site Scripting Vulnerability

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpcms V9 BLind SQL 注入漏洞

No description provided by source. http://eidelweiss-advisories.blogspot.com/2011/01/phpcms-v9-blind-sql-injection.html ! index.php?m=content&c=rss&catid=valid catid Example p0c ! http://host/index.php?m=content&c=rss&catid=10 = True ! http://host/index.php?m=content&c=rss&catid=-10 = False +...

Digital Attic SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Digital Attic SQL Injection Vulnerability Vendor Link: : http://www.digitalattic.com/ Author : tempemendoan Contact : anu :D Google Dork : inurl:"gorengan tempe" intext:"CMS by Digital Attic" === POC === ? http://website/index.php?id=S...

DLGuard 'index.php' Cross Site Scripting Vulnerability

DLGuard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...

Plum CMS Blind SQL Injection

Coder : baltazar a.k.a b4ltazar CMS name : Plum CMS Site : http://www.plum-design.net && http://www.plum.rs Dork : Powered by PlumDesign : Powered by PlumDesign site:.rs : Powered by PlumDesign site:.com Admin panel : N/A Vulnerability : Sites design with Plum CMS suffers from blind SQL injection...

Joomla 'Teams' Component SQLi Vulnerability (Nov 2011)

Joomla with Teams component is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...