7218 matches found
Sql injection
SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-4604...
CVE-2009-0574
CVE-2009-0574 describes a SQL injection in Easy CafeEngine’s index.php where the vulnerability is exploitable via the catid parameter. The affected software is Easy CafeEngine (version details in the entry reference CVE-2009-0574: no explicit version specified beyond the file name, so exact affec...
ea-gBook 0.1 - Remote Command Execution Remote File Inclusion
ea-gBook 0.1 - Remote Command Execution Remote File Inclusion !/usr/bin/perl ea-gBook 0.1 Remote Command Execution with RFI c99 Exploit Vendor: http://ea-style.de/ Download: http://ea-style.de/eddy/index.php?action=downgbookagb Author: bd0rk Contact: bd0rkathackermail.com site:...
CVE-2009-0529
Cross-site scripting XSS vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the language parameter...
Sql injection
SQL injection vulnerability in the EXtrovert Software Thyme comthyme 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php...
CVE-2009-0517
Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fields parameter, which is supplied to an eval function call within the generic function in include/class/tzenv.class. NOTE: some of these details are obtained...
CVE-2009-0516
SQL injection vulnerability in the classified page classified.php in BusinessSpace 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
Directory traversal
Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 currentmod and 2 LANG parameters to mod/index.php...
CVE-2009-0514
Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 currentmod and 2 LANG parameters to mod/index.php...
CVE-2009-0517
CVE-2009-0517 affects phpSlash 0.8.1.1 and earlier. The flaw is an eval()-based injection where unvalidated input in the fields parameter is passed to eval() inside tz_env.class, enabling remote PHP code execution with the web server’s privileges. Impact is described as complete impacts to confid...
CVE-2009-0514
CVE-2009-0514 affects WebFrame 0.76 with directory traversal in mod/index.php (parameters: currentmod, LANG). Exploitation enables remote inclusion and execution of arbitrary local files. Base CVSS 2.0 score 7.5 (HIGH); attack vector NETWORK, no authentication required. No remediation details pro...
Sql injection
SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php...
CVE-2008-6104
Summary of CVE-2008-6104 (A4Desk Event Calendar SQLi) Affects: A4Desk PHP Event Calendar.Vulnerability: SQL injection via the eventid parameter to admin/index.php, caused by insufficient input sanitization.Impact: Remote attackers could execute arbitrary SQL commands (partial confidentiality/ int...
CVE-2008-6093
SQL injection vulnerability in Noname CMS 1.0: index.php is exploitable when magic_quotes_gpc is disabled. An attacker can pass (1) file_id in the detailansicht action and (2) kategorie in the kategorien action to execute arbitrary SQL commands remotely. Affects Noname CMS 1.0; CVSS metadata indi...
phpYabs 0.1.2 Remote File Inclusion
phpyabs 0.1.2 RFI Vulnerability FOUND BY: Arka69 BUG: Remote File Include RFI CMS: phpyabs 0.1.2 SITE: http://exploita.altervista.org VULNERABLE CODE: phpyabs/moduli/libri/index.php include$GET'Azione'.".php"; RFI: http://victim.com/phpyabs/moduli/libri/index.php?Azione=SHELL...
CVE-2009-0445
The CVE-2009-0445 issue affects the Dreampics Gallery Builder, specifically the web entry point index.php. The vulnerability is an SQL injection in the gallery.viewPhotos action via the exhibition_id parameter, allowing remote commands execution. Exploitation details are not provided in the docum...
Sql injection
Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...
CVE-2008-6064
Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...