7217 matches found
CVE-2008-3192
Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...
CVE-2008-3185
Relative Real Estate Systems 3.0 and earlier are affected by an SQL injection in index.php, exploitable via the listing_id parameter in a listings action. Remote attackers can execute arbitrary SQL commands as described in CVE-2008-3185 records (NVD, CVE list). The connected documents provide vul...
WebCMS Portal Edition 'index.php' SQL注入漏洞
BUGTRAQ ID: 30204 CNCAN ID：CNCAN-2008071502 WebCMS Portal Edition是一款基于PHP的WEB应用程序。 WebCMS Portal Edition不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 WebCMS Portal Edition 目前没有解决方案提供： http://www.webcms.es/...
Wysi Wiki Wyg 1.0 (index.php c) Local File Inclusion Vulnerability
No description provided by source. --==+=========================================================+==-- --==+ Wizi Wiki Wig Local File Inclusion Vulnerability +==-- --==+=========================================================+==-- Discovered By: StAkeR [email protected] Discovered On: 10 Jul 200...
WebCMS Portal Edition (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= WebCMS Portal Edition id Remote SQL Injection Vulnerability ============================================================= Viva IslaM Viva IslaM Remote SQL InjEcti0n Vulnerabilit...
WebCMS Portal Edition - id SQL Injection
WebCMS Portal Edition - id SQL Injection Viva IslaM Viva IslaM Remote SQL InjEcti0n Vulnerability WebCMS Portal index.php menu AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS Name : WebCMS Portal Site : www.webcms.es -:: L!VE DEMO ::-...
Joomla! Component n-forms 1.01 - Blind SQL Injection
Joomla! Component n-forms 1.01 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambot Component n-forms Blind SQL Injection Exploit \n"; print " Author:The Moorish :D \n"; print "...
Sql injection
SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-3154
SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-3154
SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...
Sql injection
Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the 1 foreignkeyvalue parameter in the news page and 2 webpage parameter in the webpagemultiedit form...
CVE-2008-3129
Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the 1 foreignkeyvalue parameter in the news page and 2 webpage parameter in the webpagemultiedit form...
CVE-2008-3130
CVE-2008-3130 involves multiple cross-site scripting (XSS) vulnerabilities in OpenCart 0.7.7. The issue resides in index.php where the (1) firstname and (2) search parameters can be crafted to inject arbitrary web script or HTML. This describes a client-side injection vulnerability that could aff...
Sql injection
SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-3124
CVE-2008-3124 : A SQL injection vulnerability exists in index.php of Mole Group Hotel Script 1.0, allowing remote attackers to inject arbitrary SQL commands via the file parameter. Affected software is Mole Group Hotel Script 1.0 (index.php). The vulnerability enables partial confidentiality, int...
CVE-2008-3119
SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-3119
CVE-2008-3119 affects DreamPics Builder. The vulnerability is an SQL injection in index.php, exploitable via the page parameter, allowing remote attackers to execute arbitrary SQL commands. The sources consistently describe this as a SQL injection flaw but do not specify affected versions, patche...
CVE-2008-3125
CVE-2008-3125 describes an SQL injection in Mole Group Lastminute Script 4.0, exploitable via the cid parameter in index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry notes a CVSSv2 base score of 7.5 (High) with network access, low attack complexi...