7218 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter to index.php. NOTE: some of these details are obtained from third party information...
TBmnetCMS 1.0 (index.php content) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ==================================================================== TBmnetCMS 1.0 index.php content Local File Inclusion Vulnerability ====================================================================...
shopcart-sql.txt
Shopping Cart index.php c Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script :http://www.yourfreeworld.com/script/affiliateshoppingcart.php Demo : true & false http://www.downlinegoldmine.com/shopcart/index.php?c=12+and+substring@@version,1,1=4...
accstatistics-insecure.txt
/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : AccStatistics v1.1 Insecure Cookie Handling Script : http://www.accscripts.com/accstatistics.html...
CVE-2008-4886
CVE-2008-4886 is a SQL injection vulnerability in the YourFreeWorld Shopping Cart Script, specifically in index.php via the c parameter. The root cause is unsanitized input leading to arbitrary SQL execution. The vulnerability affects the script and has a high base severity (CVSS v2: AV:N/AC:L/Au...
CVE-2008-4886
SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the c parameter...
CVE-2008-4889
CVE-2008-4889 describes a SQL injection in the DZCP (deV!L'z Clanportal) 1.4.9.6 and earlier, triggered in the addbuddy operation via the users parameter in buddys. The vulnerability enables remote attackers with network access and no authentication to execute arbitrary SQL commands, with partial...
ModernBill 4.4.x - Cross-Site Scripting Remote File Inclusion
ModernBill 4.4.x - Cross-Site Scripting Remote File Inclusion ModernBill .:. Client Billing System - User Login ModernBill = v4.4.X Remote File Inclusion Vulnerability and xss by nigh7f411 http://xc0r3.net/ plezz go to ttp://xc0r3.net/forums/ rfi...
DEBIAN-CVE-2008-4769
Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...
CVE-2008-4769
Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...
CVE-2008-4769
Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597...
CVE-2008-4743
CVE-2008-4743 is an SQL injection vulnerability in QuidaScript’s FAQ Management Script, specifically in index.php where the catid parameter is used unsafely. The affected component is the index.php handler within the QuidaScript FAQ Management Script, with the underlying cause being improper hand...
kasracms-sql.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= KasraCMS index.php Multiple Remote SQL Injection Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Script: KasraCMS Language : PHP WebSite:...
Kasra CMS (index.php) Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ Kasra CMS index.php Multiple SQL Injection Vulnerabilities ============================================================...
MindDezign Photo Gallery 2.2 (index.php id) SQL Injection Vulnerability
No description provided by source. ================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ==================================================================================...
Etomite CMS id Paramater SQL Injection
The remote web server contains a PHP script that is affected by a SQL injection vulnerability. Description: The remote web server is running Etomite CMS, a PHP-based content management system. The version of Etomite CMS installed on the remote host fails to sanitize input to the 'id' parameter...
MindDezign Photo Gallery 2.2 (index.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= MindDezign Photo Gallery 2.2 index.php id SQL Injection Vulnerability =======================================================================...
MindDezign Photo Gallery 2.2 - SQL Injection
================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...
CVE-2008-4675
CVE-2008-4675: SQL injection in PHPcounter 1.3.2 and earlier via the name parameter in index.php. Root cause: unsanitized input leading to arbitrary SQL execution. Affected: PHPcounter 1.3.2 and older. Impact: remote attacker can run arbitrary SQL commands. Exploitation details are not provided i...