Netious CMS 0.4 (index.php pageid) SQL Injection Vulnerability

No description provided by source. Title :: Netious CMS 0.4 Remote SQL Injection Vulnerability Author :: InjEctOr s0f at w dot cn && ToTaL n.47 at hotmail.com discouvred by :: ToTaL Application :: Netious CMS 0.4 Download :: http://www.netious.com/sections/3/files/netious-cms-serv-0.4.zip Dork 1 ...

CVE-2008-2398

CVE-2008-2398 affects AppServ Open Project 2.5.10 and earlier, with a cross-site scripting (XSS) vulnerability in index.php that allows injection of arbitrary script/HTML via the appservlang parameter. Root cause is input handling in index.php failing to neutralize user-supplied appservlang data....

ComicShout 2.5 (index.php comic_id) Remote SQL Injection Vulnerability

No description provided by source. ComicShout Remote 2.5 SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x-info niiubatbl4ck-b0x.info Exploit: /index.php?comicid=-1+UNION+SELECT+1,2,3,concatsiteadmin,char58,sitepass,5,6+FROM+setup/ Admin PA: admin.php Greetz: dun - sidpsycho -...

microSSys CMS <= 1.5 Remote File Inclusion Vulnerability

No description provided by source. microSSys CMS = 1.5 Remote File Inclusion Vulnerability Software site: http://wajox.com/ =============================================================== By Raz0r www.Raz0r.name =============================================================== Vulnerable code...

Sql injection

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands via the postid parameter...

Directory traversal

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

Sql injection

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the 1 langid and 2 menuid parameters...

CVE-2008-2351

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the 1 langid and 2 menuid parameters...

CVE-2008-2356

The CVE-2008-2356 entry concerns an SQL injection in index.php of Archangel Weblog 0.90.02 and earlier, exploitable via the post_id parameter to allow remote execution of arbitrary SQL commands. Affected software is Archangel Weblog (version 0.90.02 and earlier); the underlying vulnerability is i...

MX-System 2.7.3 - index.php SQL Injection

MX-System 2.7.3 - index.php SQL Injection Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC :...

MX-System 2.7.3 - 'index.php' SQL Injection

Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC : http://target/path/index.php?page=-1+union+select+1,2,3,4,5,concatwschar58,version,user,now/...

ComicShout 2.5 (index.php comic_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== ComicShout 2.5 index.php comicid Remote SQL Injection Vulnerability ====================================================================== Exploit:...

MX-System 2.7.3 (index.php page) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability =================================================================== Name : MX-System 2.7.3 index.php page...

Sql injection

SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549...

CVE-2008-2340

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 lang parameter to a advsearch.php, b archive.php, and c index.php, and the 2 pid parameter to d listtagitems.php...

CVE-2008-2340

CVE-2008-2340 affects News Manager 2.0 with multiple SQL injection vulnerabilities. Remote attackers can exploit the (1) lang parameter in advsearch.php, archive.php, and index.php, and the (2) pid parameter in list_tagitems.php to execute arbitrary SQL commands. The entry is documented with a hi...

microssys CMS 1.5 - Remote File Inclusion

microSSys CMS = 1.5 Remote File Inclusion Vulnerability Software site: http://wajox.com/ =============================================================== By Raz0r www.Raz0r.name =============================================================== Vulnerable code index.php@22-25,54-55: 22...

GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dork. 0day.today 2018-04...

WR-Meeting 1.0 (msnum) Local File Disclosure Vulnerability

No description provided by source. | By Cr@zyKing / [email protected] \ ^| GrtZ : TheKacak - CrackersChild - Rmx - TRip - Eno7 - DreamTurk - KnocKout - TheBekir and str0ke \ ^| WR-Meeting v1.0 FI \ ^| Down : http://www.wr-script.ru/ \ ^| Demo : http://www.wr-script.ru/meeting/ ^| Info :...

GNUGallery 1.1.1.0 - admin.php Local File Inclusion

GNUGallery 1.1.1.0 - admin.php Local File Inclusion --==+================================================================================+==-- --==+ GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dor...