CVE-2008-5271

CVE-2008-5271 describes a Cross-site scripting (XSS) vulnerability in the SyndeoCMS 2.6.0 package (index.php) where the section parameter can be exploited to inject arbitrary web script/HTML. The cited sources confirm the vulnerability exists in SyndeoCMS 2.6.0 and indicate remote exploitation po...

CVE-2008-5269

The connected records confirm a concrete vulnerability: in pSys 0.7.0 alpha, SQL injection permits remote attackers to execute arbitrary SQL via the shownews parameter in index.php. The root cause is unsanitized input leading to database command execution. Impact is partial confidentiality/integr...

TxtBlog (index.php m) Local File Inclusion Vulnerability

No description provided by source. ============================================================ TxtBlog index.php m Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Undergroun...

Basic PHP CMS (index.php id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Basic PHP CMS index.php id Blind SQL Injection Vulnerability ==============================================================...

Turnkey Arcade Script (id) Remote SQL Injection Vulnerability

No description provided by source. ----------------Mor0ccan Nightmares---------------- ------------------------------ Script: Turnkey Arcade Script- ------------------------------ ----------------------------------- Site: http://www.turnkeyarcade.com- -----------------------------------...

BaSiC-CMS (index.php r) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== BaSiC-CMS index.php r Remote SQL Injection Vulnerability ========================================================== Remote SQL Injection Vulnerability BaSiC-CMS index.php r AuTh0r ...

TxtBlog 1.0 Alpha - Local File Inclusion

TxtBlog 1.0 Alpha - Local File Inclusion ============================================================ TxtBlog index.php m Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

BaSiC-CMS index.php r Remote SQL Injection Vulnerability

BaSiC-CMS index.php r Remote SQL Injection Vulnerability. CVE-2008-2789. Webapps exploit for php platform Viva IslaM Viva IslaM Remote SQL Injection Vulnerability BaSiC-CMS index.php r AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : BaSiC-CMS site :...

Turnkey Arcade Script (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Turnkey Arcade Script id Remote SQL Injection Vulnerability =============================================================...

TxtBlog (index.php m) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== TxtBlog index.php m Local File Inclusion Vulnerability ======================================================== ============================================================ TxtBlog...

jamitjob-sql.txt

■ Jamit Job Board v.3 index.php showemp ☻ AuToR: XaDoS Contact M&: xados at hotmail dot it Site: www.securitycode.it B§g: Blind $ql inJection SIte vuln: http://www.jamit.com ☻ \ Str0ke ThcMarJuana WiLLiam S. Burroughs LiLiTh You Ar& Mi!nE! /...

chipmunkguestbook-sqlxss.txt

--------------------------------------------------------- Portal Name: Chipmunk Guestbook Vendor : http://www.chipmunk-scripts.com/page.php?ID=13 Download : http://www.chipmunk-scripts.com/guestbook/guestbooks.zip Vulnerable File's : index.php Dork: Powered by c Chipmunk Guestbook Author :...

Sql injection

SQL injection vulnerability in the MambAds commambads component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the macat parameter in a view action to index.php, a different vector than CVE-2007-5177...

CVE-2008-5223

The CVE-2008-5223 issue affects Airvae Commerce 3.0 via a SQL injection in index.php, exploitable through the pid parameter. The vulnerability is evidenced by multiple references (NVD/NIST, CVE listings) and classed with a high base score (7.5) under CVSSv2: NETWORK attack vector, LOW attack comp...

CVE-2008-5217

Vulnerability context (CVE-2008-5217) : A directory traversal flaw affects the PHP-based CMS txtCMS 0.3 in index.php when PHP is configured with register_globals enabled and magic_quotes_gpc disabled. An attacker can manipulate the id parameter with a .. sequence to cause local file inclusion and...

Sql injection

SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter...

CVE-2008-5190

SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter...

CVE-2008-5190

SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter...

CVE-2008-5190

The vulnerability CVE-2008-5190 is an SQL injection in the web application eSHOP100, occurring in index.php via the SUB parameter. This allows remote attackers to execute arbitrary SQL commands, potentially impacting confidentiality, integrity, and availability as described by the CVSS metric (ba...

CVE-2008-5131

Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via 1 the aid parameter to articledetails.php, and the 2 username and 3 password to the admin panel admin/index.php...