CVE-2008-0749

CVE-2008-0749 is a Cross-site Scripting (XSS) vulnerability in Calimero.CMS 3.3, exploitable via the id parameter in the calimero_webpage action of index.php. The NVD entry states the vulnerability can allow an attacker to inject arbitrary script/HTML, with the impact on confidentiality: none, in...

Joomla! Component xfaq 1.2 - 'aid' SQL Injection

joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT :...

Joomla! Component xfaq 1.2 - aid SQL Injection

Joomla! Component xfaq 1.2 - aid SQL Injection joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT ...

CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

Sql injection

SQL injection vulnerability in index.php in the Sermon comsermon 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter...

Directory traversal

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. dot dot in the 1 permalink or 2 section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php...

Sql injection

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...

CVE-2008-0703

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. dot dot in the 1 permalink or 2 section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php...

CVE-2008-0721

The CVE-2008-0721 issue affects the Sermon (com_sermon) 0.2 component for Mambo, where an SQL injection is exploitable via the gid parameter in index.php. The vulnerability is described as allowing remote attackers to execute arbitrary SQL commands; CVSS v2 base score 7.5 (HIGH) with Network atta...

CVE-2008-0681

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the productid parameter, as demonstrated by a shop/flypage action...

CVE-2008-0703

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. dot dot in the 1 permalink or 2 section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php...

CVE-2008-0695

Vulnerability (CVE-2008-0695) : SQL injection in BookmarkX script 2007, via index.php showtopic with the topicid parameter. Allows remote arbitrary SQL execution; CVSS v2 base score 7.5 ( HIGH ). Public reference: Exploit-DB item 5040. No explicit remediation/version details present in the provid...

csp-sql.txt

COUNTER STRİKE PORTALSKommentare zum Download script download=http://www.phpwelt.de/scripte/Sonstiges/?PHPSESSID=3cfc7efaa4b2a50e397b801526944fe6 AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ MAİL : [email protected] DORK 1 : allinurl: id mode=details "index.php?page=downloads...

CVE-2008-0686

CVE-2008-0686 affects Joomla! via the NeoReferences (com_neoreferences) component versions 1.3.1 and 1.3.3. The root cause is a SQL injection in index.php triggered by the catid parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability exposes a partial confidentia...

CVE-2008-0690

The CVE-2008-0690 vulnerability affects Joomla!'s mosDirectory (com_directory) 2.3.2. A SQL injection flaw exists in index.php via the catid parameter in a viewcat action, allowing remote attackers to execute arbitrary SQL commands. The connected sources corroborate that this is a SQL injection i...

Joomla <= v1.0.14-RC1(Index.php) Remote File Inclusion Exploit

============================================================================================== Joomla = v1.0.14-RC1Index.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v2.3.1 &...

Joomla Component com_noticias 1.0 SQL Injection Vulnerability

No description provided by source. CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ joomla comnoticiasSQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net/ WHEN YOU PUT THIS SQL CODE YOU LL SEE ADM脻N NAME,ADMIN HASH AND EMA脻L DorK : 'comnoticias'...

Joomla Component NeoGallery 1.1 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Joomla Component NeoGallery 1.1 SQL Injection Vulnerability =========================================================== joomla SQL Injectioncomneogallery DORK 1 :...

joomla1014-rfi.txt

============================================================================================== Joomla = v1.0.14-RC1Index.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v2.3.1 &...

Joomla! Component NeoGallery 1.1 - SQL Injection

joomla SQL Injectioncomneogallery AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl:"comneogallery" EXPLOIT :...