Sql injection

SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-4648

CVE-2008-4648 is a Cross-site Scripting (XSS) vulnerability in Elxis CMS 2008.1 revision 2204. The issue allows remote attackers to inject arbitrary web script or HTML through the following request parameters: PATH_INFO, option, Itemid, id, task, bid, and contact_id. Notes indicate the flaw may o...

Directory traversal

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

Wysi Wiki Wyg 1.0 (LFI/XSS/PHPInfo) Remote Vulnerabilities

No description provided by source. / Wysi Wiki Wyg 1.0 LFI,XSS,PHPInfo Remote Vulnerabilities ---------------------------------------------------------- By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/wysiwikiwyg10.zip ---------------------------------------------------------- 1-...

CVE-2008-4611

SQL injection vulnerability in index.php of PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter. Connected sources do not specify affected versions, exact impact, or remediation. No exploitation details are provided in the documents.

yappang-lfi.txt

o------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : yappa-ng Version 2.3.2 | | Vendor :...

Wysi Wiki Wyg 1.0 - Local File Inclusion Cross-Site Scripting PHPInfo

Wysi Wiki Wyg 1.0 - Local File Inclusion Cross-Site Scripting PHPInfo / Wysi Wiki Wyg 1.0 LFI,XSS,PHPInfo Remote Vulnerabilities ---------------------------------------------------------- By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/wysiwikiwyg10.zip...

CVE-2008-4604

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-4604

CVE-2008-4604 affects Easy CafeEngine 1.1. Affected component: index.php. Vulnerability: SQL injection in the itemid parameter in index.php, enabling remote execution of arbitrary SQL commands. Root cause: improper sanitization of input leading to SQL injection. Impact as stated by sources: parti...

Directory traversal

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

PHP Easy Downloader 1.5 - 'file' File Disclosure

::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit: http://www.target.com/phpeasydownloader/index.php?file=index.php milw0rm.com...

Kure 0.6.3 - 'index.php' Local File Inclusion

Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability url: http://code.google.com/p/kure/downloads/list Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

CVE-2008-4570

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-4570

CVE-2008-4570 describes an SQL injection in Real Estate Classifieds: index.php vulnerable via the cat parameter, allowing remote SQL commands. Affected software/component: Real Estate Classifieds (index.php). Root cause: improper input handling enabling injected SQL. Impact (per NVD): partial con...

Real Estate Classifieds 'index.php' SQL注入漏洞

BUGTRAQ ID: 31723 CNCAN ID：CNCAN-2008101408 Real Estate Classifieds是一款基于PHP的WEB应用程序。 Real Estate Classifieds不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'cat'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Real Estate Scripts Real Estate Classifieds 目前没有解决方案提供：...

Real Estate Scripts 2008 (index.php cat) SQL Injection Vulnerability

No description provided by source. Author : EgY Coders TM Hakxer Home : Www.educ-up.com Type Gap : SQL INJECTION script : Real-Estate-Scripts see script http://www.real-estate-scripts.com/demo.html Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 ,Bright...

res-sql.txt

Author : EgY Coders TM Home : Www.educ-up.com Type Gap : SQL INJECTION script : Real-Estate-Scripts see script http://www.real-estate-scripts.com/demo.html Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 ,Bright D@rk + Bug in : index.php POC...

LokiCMS <= 0.3.4 (index.php page) Arbitrary Check File Exploit

Exploit for unknown platform in category web applications ============================================================== LokiCMS = 0.3.4 index.php page Arbitrary Check File Exploit ============================================================== LokiCMS = 0.3.4 index.php page Arbitrary Check File...