Uebimiau Web-Mail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities

No description provided by source. Uebimiau Webmail = v3.2.0-1.8 Remote File / Overwrite Vulnerabilities Dork : Uebimiau Webmail v3.2.0-1.8 POC : /uebimiau/admin/editor.php?load=config And You Can Write Any Code As ?php passthru$GETcmd; ? After That Click Write To File Go /uebimiau/index.php?cmd=...

CVE-2009-2033

CVE-2009-2033: XSS in Yogurt 0.3, via index.php msg parameter. Vulnerable component is index.php; root cause is input not sanitized, enabling remote injection of script/HTML. No remediation details provided in the supplied documents; exploitation status not specified.

CVE-2009-2037

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

campus virtual-lms - Cross-Site Scripting SQL Injection

campus virtual-lms - Cross-Site Scripting SQL Injection +-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009...

Yogurt 0.3 SQL Injection / XSS

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

yogurt 0.3 - Cross-Site Scripting / SQL Injection

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

School Data Navigator - 'page' Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.zip...

School Data Navigator - page LocalRemote File Inclusion

School Data Navigator - page LocalRemote File Inclusion ---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.z...

CVE-2009-2018

CVE-2009-2018 is a SQL injection vulnerability in the admin/index.php of Jared Eckersley’s MyCars. When magic_quotes_gpc is disabled, an attacker can craft the authuserid parameter to execute arbitrary SQL commands. The NVD entry rates it as a Medium impact (CVSSv2 6.8) with partial impact on con...

CVE-2009-2023

CVE-2009-2023 affects Shop-Script Pro 2.12. The vulnerability is a SQL injection in index.php that is exploitable when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL commands via the current_currency parameter. The description is consistent across NVD, CVE List, ...

phpBugTracker 'index.php' SQL Injection Vulnerability

The host is running phpBugTracker and is prone to SQL Injection Vulnerability. OpenVAS Vulnerability Test $Id: gbphpbugtrackersqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ phpBugTracker 'index.php' SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Network...

CVE-2009-2010

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS FCMS 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 thread parameter to messageboard.php, 2 member parameter to profile.php, 3 pid parameter to gallery/index.php, and the 4...

Shop Script Pro 2.12 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================= Shop Script Pro 2.12 Remote SQL Injection Exploit ================================================= !/usr/bin/perl =about VENDOR Shop Script Pro 2.12 maybe other versions vulnerable too...

Supernews 2.6 - index.php?noticia SQL Injection

Supernews 2.6 - index.php?noticia SQL Injection Supernews 2.6 SQL Injection Vulnability Download: http://phpbrasil.com/script-download/vT0FaOCySSH/5817 Discovered by Observing and DD3str0y3r Collaps3 CREW - Made In Brazil Dork: Supernews 2.6 Example:...

Podcast Generator 1.2 - Unauthorized Re-Installation

$file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1. blocks all 'amilogged' REQUEST variables,what about GLOBALS?,therefore useless! 2. if 'amilogged' isn't true - exit function activated. 3. unlink...

Open-school 1.0 (id) Remote SQL Injection Vulnerability

No description provided by source. Cms : Open-school Version : 1.0 Archivo : Index.php Parametro : id Sitio :http://open-school.org Url Vulnz :http://site.com/index.php?module=osnews&view=show&id=SQLI Demo Injection: Admin User,Pass:...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA aka 2.0.0b and earlier allow remote attackers to execute arbitrary SQL commands via the 1 f and 2 t parameters in a showforum action...

Sql injection

SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2009-1850

SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2009-1848

SQL injection vulnerability in the JoomlaMe AgoraGroups aka AG or comagoragroup component 0.3.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a groupdetail action to index.php...