CVE-2008-6485

CVE-2008-6485 : The connected documents confirm a SQL injection in SoftComplex PHP Image Gallery, specifically in index.php via the ctg parameter. The root cause is unsafe SQL construction in the application, enabling remote attackers to execute arbitrary SQL commands with the potential for parti...

CVE-2008-6488

CVE-2008-6488 describes an SQL injection in the login action of the web application SoftComplex PHP Image Gallery 1.0 . The vulnerability exists in the login functionality, where the Admin field can be exploited to execute arbitrary SQL commands remotely. According to the NVD entry, the vulnerabi...

CVE-2008-6477

SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Sql injection

SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-6477

CVE-2008-6477 involves a SQL injection vulnerability in Mumbo Jumbo Media OP4, where an attacker can send crafted input to the id parameter in index.php to execute arbitrary SQL commands. Affected: Mumbo Jumbo Media OP4. Root cause and exact exploit flow are not detailed in the provided documents...

Sql injection

SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-6468

CVE-2008-6468 affects Diesel Pay: SQL injection in index.php via the area parameter in a browse action. Root cause is improper input handling in that parameter, enabling remote attackers to potentially execute arbitrary SQL commands. The vulnerability is rated CVSS v2 base score 7.5 (HIGH) with n...

CVE-2008-6468

SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action...

YAP 1.1.1 - index.php Local File Inclusion

YAP 1.1.1 - index.php Local File Inclusion YAP v1.1.1 Local File Inclusion Vulnerability AUTHOR : Alkindiii CONTACT : Alkindiii 4T islamway D0T net HOME : http://www.soqor.net Script : YAP Version : 1.1.1 Download v1.1 : http://wildmary.net-sauvage.com/share/yap1.1.tar.gz Update to v1.1.1 :...

phpmysport 1.4 - Cross-Site Scripting / SQL Injection

PhpMySport v. 1.4 Multiple Remote Vulnerabilities XSS\SQL + Discovered by XaDoS - xados at hotmail dot it Th4nKs AlpHaNiX -Product site: http://phpmysport.sourceforge.net -Version vuln: 1.4latest and maybe $QLXSSalertdocument.cook...

PHP Director <= 0.21 (sql into outfile) eval() Injection Exploit

No description provided by source. include stdio.h include stdlib.h include string.h include netinet/in.h include arpa/inet.h include netdb.h / Dork "Powered by PHP Director 0.2" | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit-...

Joomla Djice Shoutbox 1.0 XSS

Joomla Djice Shoutbox v 1.0 alert'XaDoS' or '"alert'XSS By XaDoS' the XSS become permanent in every page of site! not critical damage but it's not funny.. + D3M0: http://www.djiceatwork.com contact me at xados @ hotmail . it www.securitycode.it...

PHP Director 0.21 - SQL Into Outfile 'eval()' Injection

include include include include include include / Dork "Powered by PHP Director 0.2" | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit- index.php?cat=%27+UNION+SELECT+1,'lol',3,4,5,6,7,8,9,10,11,12,13,14,15+INTO+OUTFILE+'/var/www/ex.php'/ PHP.ini- Magic Quotes off Written- by...

CVE-2008-6431

BMForum 5.6 is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue arises from unsafely handling user-supplied input in several parameters: (1) outpused in index.php, (2) footer_copyright and (3) verandproname in newtem/footer/bsd01footer.php, and (4) topads and (5) myplugi...

Sql injection

SQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a brain action...

CVE-2008-6409

CVE-2008-6409 affects ol’bookmarks manager version 0.7.5. A SQL injection flaw exists in a brain action where the id parameter in index.php is unsafely used, allowing remote attackers to execute arbitrary SQL commands. This is documented by NVD and related CVE records, with a base score of 7.5 (H...

CVE-2009-0818

Cross-site scripting XSS vulnerability in the taxonomythemeadmintablebuilder function taxonomythemeadmin.inc in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the "administer taxonomy" permission, or the ability to create pages when tagging is...

CVE-2009-0818

Cross-site scripting XSS vulnerability in the taxonomythemeadmintablebuilder function taxonomythemeadmin.inc in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the "administer taxonomy" permission, or the ability to create pages when tagging is...

CVE-2009-0805

CVE-2009-0805 describes a cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier , a XOOPS calendar module. The flaw allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php. Impact is arbitrary script execution in affected users’ browser...

CVE-2009-0765

CVE-2009-0765 affects Kipper 2.01, where index.php is vulnerable to directory traversal: remote attackers can include and execute arbitrary local files via .. in the configfile parameter. The issue enables partial confidentiality, integrity, and availability impact (CVSSv2 base score 7.5; AV:N/AC...