CVE-2008-3918

CVE-2008-3918 affects Ovidentia 6.6.5. The vulnerability is a SQL injection in index.php triggered by the field parameter in a search action, allowing remote attackers to execute arbitrary SQL commands. NVD data indicates network attack vector, low attack complexity, no authentication, and partia...

Coupon Script 4.0 - id SQL Injection

Coupon Script 4.0 - id SQL Injection || | | Coupon Script 4.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | WwW.tryag.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Sql injection

Multiple SQL injection vulnerabilities in the comcontent component in MiaCMS 4.6.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 view, 2 category, or 3 blogsection action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Matterdaddy Market 1.1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 type parameters...

CVE-2008-3786

The CVE-2008-3786 entry concerns a Cross-site Scripting (XSS) vulnerability in index.php of PICTURESPRO Photo Cart 3.9. The issue arises from the qtitle parameter (Gallery or event name) in a search action, where user-supplied input is not properly sanitized, enabling an attacker to inject arbitr...

CVE-2008-3782

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 Category name field under Advertisement Packages, the 2 Reason field under Credit/Debit Users, and the 3 FAQ question an...

popnupblog-xss.txt

PopnupBlog index.php multiple variables XSS Vendor url:http://www.bluemooninc.biz/ Advisore:http://lostmon.blogspot.com/2008/08/ popnupblog-indexphp-multiple-variables.html Vendor notify:no exploits availables:yes PopnupBlog contains a flaw that allows a remote cross site scripting attack.This fl...

Matterdaddy Market 1.1 - index.php Multiple SQL Injections

Matterdaddy Market 1.1 - index.php Multiple SQL Injections Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 25.08.08 Product: Market Version: 1.1 Download script: http://www.matterdaddy.com/4/scripts/marketv11.zip Vulnerability Class: SQL Injection magicquotesgp...

miacms-sql.txt

MiaCMS SourceCtrl+F3 ... onclick="window.open'http://digg.com/submit?phase=3&url='+encodeURIComponentlocation.href+'&bodytext=This+site+uses+MiaCMS+-+the+free%2C+open+source+content+management+system+admin%3A21232f297a57a5a743894a0e4a801fc3& admin:21232f297a57a5a743894a0e4a801fc3...

MiaCMS <= 4.6.5 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. MiaCMS = 4.6.5 SQL Injection Vulnerability Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 24.08.08 Product: MiaCMS Version: 4.6.5 Download script: http://miacms.googlecode.com/files/MiaCMSv4.6.5.tar.gz Vulnerability Class: SQ...

onenews Beta 2 - Cross-Site Scripting / HTML Injection / SQL Injection

///////////////\\\\\\\\ Name : OneNews Beta 2 Multiple Vulnerabilities Author : suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source : http://sourceforge.net/project/showfiles.php?groupid=193198 Dork : Powered by One-News Greetz : all DaRk-CodeRs guys, e.wiZz, str0ke ========================== |1...

Sql injection

SQL injection vulnerability in index.php in Simasy CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

noname-lfi.txt

NoName Script 1.0 Local File Inclusion + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz Example : http://localhost/index.php?action=../../../autoexec.bat%00 This will open autoexec.bat...

Sql injection

SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in PHPizabi before 848 Core HotFix Pack 3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a blogs.search action...

CVE-2008-3735

CVE-2008-3735 describes a cross-site scripting (XSS) vulnerability in PHPizabi’s index.php prior to 848 Core HotFix Pack 3. The flaw allows remote attackers to inject arbitrary web script or HTML through the query parameter in a blogs.search action. Affected software: PHPizabi (before 848 Core Ho...

CVE-2008-3711

CVE-2008-3711 concerns PHPArcadeScript 4.0. An SQL injection vulnerability exists in index.php during the browse action, where the cat parameter can be exploited remotely to execute arbitrary SQL commands. This is documented across multiple sources (NVD/NVD entry, CVE listing). The connected docu...

Ovidentia 6.6.5 XSS (index.php)‏

Ovidentia 6.6.5 XSS Discovered by : ThE dE@Th mailto:dE@Th Fr!ends : Bright D@rk mailto:D@rk - The-Gh0st - all 3asfh.net Members Script Download : www.ovidentia.org DORK : "Powered by Ovidentia" Bug...

ptcinvest-sql.txt

|| | | PTCinvestment 1.2 adid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://discountedscripts.com/productinfo.php?productsid=68 | | DorK...

Unfixed XSS vulnerability at www.kentaurus.cz

Security researcher austinator, has submitted on 15/08/2008 a cross-site-scripting XSS vulnerability affecting www.kentaurus.cz, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is currentl...