CVE-2009-4523

CVE-2009-4523 is an XSS vulnerability in Zainu 1.0. The issue resides in index.php, vulnerable via the searchSongKeyword parameter in a SearchSong action, allowing remote injection of arbitrary script/HTML. The NVD entry assigns a CVSSv2 base score of 4.3 (medium) with network attack vector, requ...

CVE-2009-4460

Multiple cross-site scripting XSS vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to 1 index.php, 2 faq.php, and 3 register.php...

CVE-2009-4460

Multiple cross-site scripting XSS vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to 1 index.php, 2 faq.php, and 3 register.php...

Joomla Calendario Blind SQL Injection

Joomla Component comcalendario Blind SQL injection Vulnerability author : Mr.tro0oqy -- yemeni hacker email : [email protected] dork: inurl:index.php?option=comcalendario exp : http://www.target.com/index.php?option=comcalendario&task=detalhes&Itemid=88&id=297+and+1=1 true...

Joomla 1.5.x Local File Inclusion

Joomla 1.5.x + Download: http://www.joomla.org/download.html + Bug: Local File inclusion in index.php file + Author: s4r4d0 + Mail: [email protected] + Team: Fatal Error + Poc: http://www.site.com/index.php?option=/../../../../../../../../../../../../etc/passwd%00 + Demo:...

DBHCMS Web Content Management System 1.1.4 Remote File Inclusion

DBHCMS - Web Content Management System RFI Vulnerability http://www.drbenhur.com/ Author: Gamoscu Site: www.1923turk.biz https://gamoscu.wordpress.com/ Manas58 - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO Hosgeldin medine bebek Allah anali babali buyutsun pasam Exploit: Vuln file...

phpbb 2.0.8 index.php 跨站脚本漏洞

No description provided by source...

Sql injection

SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands via the productid parameter in a shop.productdetails shop.flypage action...

Sql injection

SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL commands via the v parameter in a video action...

CVE-2009-4430

CVE-2009-4430 describes an SQL injection in VirtueMart 1.0: index.php handling the shop.product_details action is vulnerable to crafted product_id values, allowing remote SQL commands. The vulnerability affects VirtueMart 1.0 and is supported by NVD data (CVSSv2 base score 7.5, HIGH). Connected s...

CVE-2009-4430

SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands via the productid parameter in a shop.productdetails shop.flypage action...

E-Pay RFI Vulnerability

No description provided by source. ======================================================================================== | Title : E-Pay RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...

DBHCMS - Web Content Management System v1.1.4 RFI Vulnerability

No description provided by source. DBHCMS - Web Content Management System RFI Vulnerability http://www.drbenhur.com/ Author: Gamoscu Site: www.1923turk.biz https://gamoscu.wordpress.com/ Manas58 - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO Hosgeldin medine bebek Allah anali babal...

discuz 4.1.0 index.php 跨站脚本漏洞

No description provided by source...

Sql injection

SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands via the moduleid parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4403

CVE-2009-4403 corresponds to a cross-site scripting (XSS) vulnerability in the index.php of Rumba XML 1.8, exploitable via PATH_INFO. The documented impact is that remote attackers can inject arbitrary web script or HTML. The entry is supported by multiple sources (NVD and CVE records) with a bas...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net Ez Poll Hoster EPH allow remote attackers to inject arbitrary web script or HTML via the 1 pid parameter in a code action to index.php and the 2 uid parameter in a view action to profile.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in texmedia Million Pixel Script 3 allows remote attackers to inject arbitrary web script or HTML via the pa parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4381

Cross-site scripting XSS vulnerability in index.php in texmedia Million Pixel Script 3 allows remote attackers to inject arbitrary web script or HTML via the pa parameter. NOTE: some of these details are obtained from third party information...

mypage v0.4 Local File Inclusion Vulnerability

No description provided by source. mypage0.4 LFI Vulnerability Author: BAYBORA Site: www.1923turk.bizhttp://www.1923turk.biz Exploit: Vuln file: index.php?page=LFI Exploit: POST http://server/index.php?page=../../../../../../../../etc/passwd index.php ifisset$GET'page'...