CVE-2010-1610

Cross-site request forgery CSRF vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to "user/user/insert." NOTE: some of...

CVE-2010-1602

CVE-2010-1602 affects Joomla! ZiMB Comment component 0.8.1 (com_zimbcomment). The vulnerability is a Local File Inclusion via a directory traversal (.. in the controller parameter to index.php), allowing an attacker to read arbitrary files and potentially impact other areas. The Nuclei template c...

Joomla ABC Component "sectionid" SQL Injection Vulnerability

No description provided by source. A vulnerability has been discovered in the ABC component for Joomla, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the "sectionid" parameter to index.php when "option" is set to "comabc" is not properly sanitised...

CVE-2009-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 do, 2 id, and 3 uname parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 category and 2 listquantity parameters to index.php, and the 3 category parameter to your.order.php...

CVE-2010-1541

Multiple cross-site scripting XSS vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 category and 2 listquantity parameters to index.php, and the 3 category parameter to your.order.php...

CVE-2010-1540

CVE-2010-1540 : A directory traversal vulnerability affects Joomla! component com_myblog (MyBlog) version 3.0.329, where an attacker can read arbitrary files via a .. (dot dot) in the task parameter of index.php. This is a vulnerability in the Joomla! MyBlog component and is documented in both th...

Uiga Personal Portal - index.php view SQL Injection

Uiga Personal Portal - index.php view SQL Injection Exploit Title: Uiga Personal Portal index.php view SQL Injection Vulnerability Date: 27-4-2010 Author: 41.w4r10r Software Link : http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: Web Application Tested on: Apcahe/Unix CVE ...

Sethi Family Guestbook 3.1.8 - Cross-Site Scripting

:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Sethi Family Guestbook XSS Vulnerabilities Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...

Madirish Webmail 2.01 (basedir) RFI/LFI Vulnerability

Exploit for php platform in category web applications ===================================================== Madirish Webmail 2.01 basedir RFI/LFI Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Sql injection

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...

Sql injection

Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to view.php and the 2 a parameter in an event action to calendar.php, reachable through index.php...

CVE-2009-4794

Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to view.php and the 2 a parameter in an event action to calendar.php, reachable through index.php...

CVE-2009-4783

The CVE-2009-4783 item concerns multiple SQL injection vulnerabilities in Theeta CMS (version unclear). The affected entry points are the start parameter in three PHP scripts: community/forum.php, community/thread.php, and blog/index.php, where user-supplied input may be concatenated into SQL que...

CVE-2009-4767

Technical details, affected versions, exploit steps, and remediation are not provided in the connected documents; monitor for updates.

Sql injection

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager aka MVRMM or commvrestaurantmenumanager component 1.5.2 Stable Update 3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the mid parameter in a menudisplay action to index.php...

Kleophatra CMS Cross Site Scripting

Exploit Title: Kleophatra CMS XSS Vulnerability Date: 19/4/2010 My home :www.Dev-Point.com Author: anT!-Tr0J4n Software Link:http://portal.kleophatra.org ===== Exploit XSS ====== Exploit : index.php?module= Xss http://localhost/kleo/index.php?module=1alertdocument.cookie...

WebAdmin - Arbitrary File Upload

Exploit Title: WebAdmin Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Code : g00gle d0rk: inurl:webadmin.php Size · Permission · Owner · Group, Functions. 3xpl0it: You Edit index.php Or Shell Upload Greetz To: Efe KroNicKq NoFearx38 and All 1923Turk.Com Members...

Joomla Component QPersonel SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

MKPortal Contact module XSS Vulnerability

========================================= MKPortal Contact module XSS Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // //...