7218 matches found
Mini Blog 1.0.1 - index.php Multiple Local File Inclusions
Mini Blog 1.0.1 - index.php Multiple Local File Inclusions / $Id: miniblog-1.0.1-lfi.txt,v 0.1 2008/12/06 04:06:00 cOndemned Exp $ Mini Blog 1.0.1 index.php Multiple Local File Inclusion Vulnerabilities Discovered by cOndemned Download : http://www.bpowerhouse.info/miniblog.htm Greetz : ZaBeaTy,...
Sql injection
SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter...
CVE-2008-5336
CVE-2008-5336 describes a SQL injection in WebStudio CMS: index.php vulnerable via the pageid parameter, enabling remote attackers to inject arbitrary SQL. Multiple sources (NVD, CVE listings, Exploit-DB) confirm the vulnerability and the affected component (WebStudio CMS, pageid input) with a ba...
tizag-upload.txt
remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail: [email protected]...
My Simple Forum 3.0 (index.php action) Local File Inclusion Vulnerability
No description provided by source. / $Id: mysimpleforum-3.0-lfi.txt,v 0.1 2008/12/04 23:03:00 cOndemned Exp $ My Simple Forum 3.0 index.php action Local File Inclusion Vulnerability Bug discovered by cOndemned Script download: http://drennansoft.com/index.php?action=download&id=1 Greetz: ZaBeaTy,...
My Simple Forum 3.0 - Local File Inclusion
/ $Id: mysimpleforum-3.0-lfi.txt,v 0.1 2008/12/04 23:03:00 cOndemned Exp $ My Simple Forum 3.0 index.php action Local File Inclusion Vulnerability Bug discovered by cOndemned Script download: http://drennansoft.com/index.php?action=download&id=1 Greetz: ZaBeaTy, str0ke, d2, TBH, Avantura / Source...
My Simple Forum 3.0 (index.php action) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================================= My Simple Forum 3.0 index.php action Local File Inclusion Vulnerability ========================================================================= / $Id:...
CVE-2008-5323
Cross-site scripting XSS vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s parameter...
Sql injection
SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the no parameter...
Code injection
Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function...
CVE-2008-5322
Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function...
CVE-2008-5323
Cross-site scripting XSS vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2008-5321
SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the no parameter...
CVE-2008-5323
The CVE-2008-5323 issue affects Wysi Wiki Wyg 1.0, where index.php is vulnerable to Cross-site Scripting (XSS). An attacker can remotely inject arbitrary script/HTML via the s parameter, with a CVSSv2 base score of 4.3 (Medium): confidentiality impact None, integrity impact Partial, availability ...
CVE-2008-5321
The CVE-2008-5321 entry describes a SQL injection in the GesGaleri module (index.php) for XOOPS, exploitable via an input parameter (the none parameter is cited as the injection point). A remote attacker could execute arbitrary SQL commands according to the description and CVSS metrics (base scor...
CVE-2008-5309
SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in the resendemail module to index.php...
CVE-2008-5306
An SQL injection vulnerability exists in PG Real Estate Solution: admin/index.php accepts the login_lg (username) parameter in a way that allows remote attackers to execute arbitrary SQL commands. The issue is tied to the login handling code and carries a CVSS v2 base score of 7.5 (HIGH) with par...
CVE-2008-5307
CVE-2008-5307: A SQL injection vulnerability exists in admin/index.php of the PG Roommate Finder Solution, exploitable via the login_lg parameter. The flaw enables remote attackers to execute arbitrary SQL commands. The NVD entry notes this as a high-severity issue (CVSSv2 base score 7.5; AV:N/AC...