CVE-2008-1407

The provided connected documents identify a concrete vulnerability: an SQL injection in the WebChat 1.60 module for eXV2, affecting index.php. The vulnerability is triggered via the roomid parameter, enabling remote attackers to inject arbitrary SQL commands. The root cause is unsafe handling of ...

CVE-2008-1404

CVE-2008-1404 describes an SQL injection in the Viso (Industry Book) module for eXV2, affecting versions 2.04 and 2.03. The vulnerability is in index.php via the kid parameter, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the connected docume...

joomlaintellect-lfi.txt

Aria-Security Team Persian Security Team http://forum.aria-security.com For English http://forum.aria-security.net For Farsi ------------------------------------------ Greetz: Aura, NULL, Kinglet, t3rr0r1st, Mambo/joomla comintellect "page" LFI Poc:...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in wildmary Yap Blog 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the eWebsite eWeather Weather module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the chart parameter to modules.php...

eXV2 Module WebChat 1.60 (roomid) Remote SQL Injection Vulnerability

No description provided by source. Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...

exv2webchat-sql.txt

Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...

eXV2 Module WebChat 1.60 - roomid SQL Injection

eXV2 Module WebChat 1.60 - roomid SQL Injection Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...

CVE-2008-1323

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...

CVE-2008-1324

CVE-2008-1324 affects Travelsized CMS 0.4.1. The vulnerability is a directory-traversal flaw in index.php allowing remote attackers to include and execute arbitrary local files via a .. in the page_id and language parameters. This is supported by the NVD description and related entries that refer...

CVE-2008-1313

CVE-2008-1313 involves SQL injection vulnerabilities in Bloo 1.00 and earlier, triggered through parameters (post_id, post_category_id, post_year_month, static_page_id) and other vectors in index.php. Remote attackers could execute arbitrary SQL commands. The vulnerability is documented with a CV...

CVE-2008-1313

Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 postid, 2 postcategoryid, 3 postyearmonth, and 4 staticpageid parameters; and unspecified other vectors...

yapblog-rfi.txt

Description: Yap Blog 1.1 Remote File Include RFI Script Name: Yap Blog 1.1 Author : THEMILLER contact : themilleratlinuxmail.org Download URL : http://wildmary.net-sauvage.com/share/yap1.1.tar.gz Bug Type: Remote File Inclusion Bug In: index.php Vulnerable Code: if isset$GET'page' include...

EasyGallery <= 5.0tr Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== EasyGallery "alert"JosS + Cross Site Scripting: Vuln File: index.php Exploit: http://localhost/PATH/staticpages/easygallery/index.php?help=about&q=XSS Example: %22+onmouseover=alert"JosS...

Joomla Component ProductShowcase <= 1.5 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component ProductShowcase = 1.5 SQL Injection Vulnerability =================================================================== Joomla Component comproductshowcase...

Joomla Component Candle 1.0 (cID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Joomla Component Candle 1.0 cID SQL Injection Vulnerability ============================================================= JOOMLA comcandle SQL Injectioncid DORK 1 :...

Sql injection

SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action...

Sql injection

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the modprojectid parameter in a projectdetail action...

CVE-2008-1164

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the modprojectid parameter in a projectdetail action...

CVE-2008-1165

Multiple cross-site scripting XSS vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script or HTML via 1 a forced SQL error message or 2 oldvalue and newvalue database fields in task summaries, related to the itemsummary parameter in a details action...