CVE-2008-2897

CVE-2008-2897 describes a SQL injection in PageSquid CMS 0.3 Beta, where the vulnerability is in index.php via the mass-assignable? page parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 ( HIGH ), with access over network and n...

OTManager CMS 24a - Local File Inclusion Cross-Site Scripting

OTManager CMS 24a - Local File Inclusion Cross-Site Scripting =========================================================== OTManager CMS LFI/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| -------...

Sql injection

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjokeid parameter, a different vector than CVE-2008-1050...

CVE-2008-2875

SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL commands via the hal parameter...

Directory traversal

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

CVE-2008-2876

CVE-2008-2876 affects the web app mUnky version 0.0.1 . The vulnerability is a directory traversal in index.php that allows an attacker to cause local file inclusion via a .. in the zone parameter, enabling arbitrary local file access/execution according to the entry. The CVSS metrics in the init...

Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, |...

Cross-Site Scripting vulnerability in ExpressionEngine

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в системе ExpressionEngine. XSS: Уязвимость в скрипте index.php в параметре URL, если включен meta-refresh редиректор. http://site/index.php?URL=223E3Cscript3Ealertdocument.cookie3C/script3E Уязвима версия...

kellerwebadmin-lfi.txt

=========================================================== Keller Web Admin CMS Local File Inclusion Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2008-2845

SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL commands via the type parameter...

Sql injection

SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the eml parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2865

The CVE-2008-2865 entry concerns a SQL injection vulnerability in Kalptaru Infotech PHP Site Lock 2.0, exploitable via the articleid parameter in a show_article action. The underlying issue is unsafe SQL construction in index.php that allows remote attackers to execute arbitrary SQL commands. Imp...

CVE-2008-2853

CVE-2008-2853 describes a SQL injection in Easy Webstore 1.2, affecting the file index.php via the cat_path parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Affected software/entry: Easy Webstore 1.2 (index.php, cat_path). The initial documentation provides ...

CVE-2008-2858

The CVE-2008-2858 entry documents a SQL injection in WebChamado 1.1, occurring in index.php via the eml parameter. The underlying issue is an injection vulnerability that could allow a remote attacker to execute arbitrary SQL commands. Affected component: WebChamado 1.1 (index.php). Root cause de...

CVE-2008-2845

SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2844

The CVE-2008-2844 issue affects Carscripts Classifieds: an SQL injection in index.php via the cat parameter allows remote attackers to execute arbitrary SQL commands. This is a server-side vulnerability in the web application layer that could lead to data disclosure or modification if exploited. ...

munky-lfi.txt

================================================================================ | | | | | | | | | | | | | | | ' | | '/ | | || | | |/ \ | | | | | | | | | | | | | | || || | / | | || || |||| ,| |, || | | |/ | | | | / | | | | \ \ / / | | | | '| | | | | | | | | / | || | | | | || || | | | |/...