7218 matches found
CVE-2008-4431
CVE-2008-4431 describes a SQL injection in IceBB 1.0-rc9.3 and earlier, exploitable via the skin parameter in index.php. The root cause is a likely flaw in the protection mechanism within the clean_string function in includes/functions.php, allowing remote attackers to execute arbitrary SQL comma...
Printlog <= 0.4: Remote File Edition Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found by Pepelux pepeluxatenye-sec.org...
hostadmin-xss.txt
Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Cross-Site Scripting Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT discovery.....: Am!r IrIsT contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?page=XSS...
CVE-2008-4376
CVE-2008-4376 affects the Live TV Script software, specifically the vulnerable code path in index.php where the mid parameter is used in SQL queries. The underlying issue is an SQL injection vulnerability that could allow a remote attacker to execute arbitrary SQL commands. Documented impact is p...
CVE-2008-4374
CVE-2008-4374 describes an SQL injection in CMS Buzz: index.php vulnerable to manipulation of the id parameter in the playgame action, enabling remote SQL command execution. The issue is due to improper input handling in the affected PHP file, with CVSS v2 indicating High severity (base score 7.5...
CVE-2008-4376
SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...
printlog-disclose.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...
Crux Gallery <= 1.32 (index.php theme) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================================= Crux Gallery Osirys and darkjoker 14. $m = $GET'm'; 15. $p = $GET'p'; 16. $dir = $GET'dir'; 17. requireonce"main.php"; 18. requireonce"themes/".$theme."/theme.php";...
CVE-2008-4354
SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...
CVE-2008-4354
The CVE-2008-4354 entry describes an SQL injection in the NetArt Media iBoutique 4.0 products module, exploitable via the cat parameter to index.php. Affected component: products module; vulnerable input handling allows arbitrary SQL execution. Root cause: improper input validation for the cat pa...
CVE-2008-4351
Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. dot dot in the p parameter...
CVE-2008-4331
Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to index.php...
Directory traversal
Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to index.php...
CVE-2008-4330
Summary: CVE-2008-4330 describes a directory traversal vulnerability in LanSuite 3.3.2, specifically in index.php where the design parameter can be exploited to include and execute arbitrary local files via a .. sequence. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with Network attac...
CVE-2008-4331
CVE-2008-4331 describes a directory traversal vulnerability in phpOCS 0.1 beta3 and earlier. The flaw resides in library/pagefunctions.inc.php, where an attacker can influence the act parameter in index.php to perform dot-dot traversal, enabling remote inclusion and execution of arbitrary local f...
Pritlog 0.4 - Filename Remote File Disclosure
Pritlog 0.4 - Filename Remote File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works bas...
Pritlog <= 0.4 (filename) Remote File Disclosure Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found...
Pritlog 0.4 - 'Filename' Remote File Disclosure
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...
PlugSpace 0.1 (index.php navi) Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl PlugSpace v0.1 Local File Inclusion Vulnerability Download:...