CVE-2008-6790

The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php...

Sql injection

SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter...

CVE-2009-1499

The CVE-2009-1499 entry describes an SQL injection in the Joomla! MailTo (com_mailto) component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php, indicating a remote‑code capable injection affecting the application’s database quer...

ProjectCMS 1.0b (index.php sn) Remote SQL Injection Vulnerability

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

Directory traversal

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to index.php...

CVE-2009-1480

Pragyan CMS 2.6.4 is affected by a SQL injection in index.php. The vulnerability is triggered via the fileget parameter in a view action and other vectors, enabling remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the documents, and there is no remediat...

Thickbox Gallery v2 (index.php ln) Local File Inclusion Vulnerability

No description provided by source. + Thickbox Gallery v2 Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Local File Inclusion PoC : http://127.0.0.1/path/index.php?ln=../../../../../../BOOTSECT.BAK%00...

CVE-2009-1445

Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to 1 read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and 2 include and execute arbitrary local files via directory traversal sequences in the...

Thickbox Gallery v2 (index.php ln) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Thickbox Gallery v2 index.php ln Local File Inclusion Vulnerability ===================================================================== + Thickbox Gallery v2 Local Fil...

Opencart 1.1.8 (route) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================= Opencart 1.1.8 route Local File Inclusion Vulnerability ========================================================= +=================================================================+...

Opencart 1.1.8 Local File Inclusion

+=================================================================+ xTitle : Opencart Lfi Injection Vulnerability xSoftware : OpenCart opencartv1.1.8 xVendor : http://www.opencart.com/ xDate : 25 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog : http://oonboy.blogspot.co...

CVE-2009-1405

CVE-2009-1405 : Affected software is PastelCMS 0.8.0. The vulnerability is a directory traversal in index.php allowing remote inclusion/execution of local files via a ".." in the set_lng parameter when magic_quotes_gpc is disabled. This is the core impact described in the connected documents. The...

Deserialization of untrusted data

index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action...

CVE-2009-1367

Cross-site scripting XSS vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a...

CVE-2009-1367

MoziloCMS vulnerability CVE-2009-1367 affects moziloCMS 1.11 (index.php) with XSS via the search action parameter. The OpenVAS entry also notes a local file-include (LFI) and XSS issue in moziloCMS, indicating input sanitization failures. Affected component: moziloCMS web application; issue type:...

CVE-2009-1362

SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary SQL commands via the loginname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6741

SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...

Quick.CMS Lite 0.5 SQL Injection

+-------------------------------------+ + Homepage: http://opensolution.org/ + Product: Quick.CMS Lite 0.5 + File: index.php + Parameter: id + Dork: "Powered by Quick.Cms" +-------------------------------------+ + SQL Injection: + http://www.sennik.sos.pl/index.php?t=ph&id=null'+union+select+ +...

Quick.Cms.Lite 0.5 (id) Remote SQL Injection Vulnerability

No description provided by source. +-------------------------------------+ + Homepage: http://opensolution.org/ + Product: Quick.CMS Lite 0.5 + File: index.php + Parameter: id + Dork: "Powered by Quick.Cms" +-------------------------------------+ + SQL Injection: +...

Quick.CMS.Lite 0.5 - 'id' SQL Injection

+-------------------------------------+ + Homepage: http://opensolution.org/ + Product: Quick.CMS Lite 0.5 + File: index.php + Parameter: id + Dork: "Powered by Quick.Cms" +-------------------------------------+ + SQL Injection: + http://www.sennik.sos.pl/index.php?t=ph&id=null'+union+select+ +...