Information disclosure

AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/menu/index.php and certain other files...

Information disclosure

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...

OneCMS 2.6.4 SQL Injection

=========================================================== OneCMS 2.6.4 Remote SQL insertion Vulnerability ----------------------------------------------------------- foun by :kurdish hackers team group : kurd-team contact : [email protected] site : kurdteam.org...

Sql injection

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the 1 id parameter in a savedsearch action and 2 itemtypes parameter in a showitemsearch action in the...

CVE-2010-4834

The CVE-2010-4834 entry describes multiple SQL injection flaws in index.php for OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition. The vulnerabilities reside in the search_management_manage subcontroller, where remote authenticated users can manipulate the (1) id parameter in a saved_s...

CVE-2009-5089

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2009-5089

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

PHP Support Tickets 2.2 - Code Execution

Exploit Title: PHP Support Tickets v2.2 Code Exec Google Dork: "PHP Support Tickets v2.2" Date: 26.09.2010 Author: brainpillow Software Link: http://www.phpsupporttickets.com/ Version: 2.2 ==================================================================== Vuln. code: /classes/GUI/abstract.GUI.p...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...

Webmobo WB News System - Blind SQL Injection

Webmobo WB News System - Blind SQL Injection Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable...

Webmodo News System SQL Injection

Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable Page: index.php Example:...

Webmobo WB News System Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input...

D-Tekweb SQL Injection

================================================ D-Tekweb index.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

Different Web SQL Injection

===================================================== Different Web index.php SQL Injection Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

VicBlog SQL Injection

Exploit Title: VicBlog SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.vicdesigns.com.au Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Vulnerable Page: index.php Example: index.php?page=posts&tag=...

TotalShopUK 1.7.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/49263/info TotalShopUK is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or...

DV Cart Shopping Cart software - SQL Injection

Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example index.php?keyword=&mod=search&submit=G...

Joomla Soft SQL Injection

Application Name : Joomla comsoft Type : SQL Injection author : Sktevahshat Google Dork : index.php?option=comsoft E-mail: [email protected] http://www.sthst.com/index.php?option=comsoft&cid=3 heloo new bug in joomla -------------------------------------------------- ", "+", "%"; $id =...

BlueSoft Rate My Photo Site SQL Injection

Script Name : BlueSoft Rate My Photo Site Vulnerable Type : Blind SQL Ýnjection Time Based Author : darkTR Date : 08.08.2011 E-mail : [email protected] Target: : index.php?cmd=SQLi Demo: : http://shopbluesoft.com/demo7/index.php?cmd=10&ty=2SQLi darkTR / Code Hunters TIM...

System Werkform 2.0 SQL Injection

|Title : System werkform index.php SQL Injection Vulnerability | Software : werkform | Version : 2.0 | Date : 3 / 08 / 2011 | Author : Net.Edit0r | Contact : [email protected] & [email protected] | Google Dork : "powered by werkform" | Vendor : http://www.werkform.at/ | My Home :...