vcart 3.3.2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== vcart 3.3.2 Multiple Remote File Inclusion Vulnerabilities ==========================================================...

vcart 3.3.2 - Multiple Remote File Inclusions

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : vcart version 3.3.2 Discovered By : k1n9k0ng Scripts site : http://www.visionburst.com/ Thanks To : sekuritionline, semprol, bajingan, mimid, r.i.p, x-code, yogyafree special To : adhietslank, suka...

Sql injection

SQL injection vulnerability in index.php in the Newbbplus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter...

CVE-2008-0224

SQL injection vulnerability in index.php in the Newbbplus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter...

CVE-2008-0201

Cross-site scripting XSS vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameter...

Crlf injection

CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter...

DomPHP 0.81 (index.php page) Remote File Inclusion Vulnerability

No description provided by source. DomPHP v0.81 Remote File Inclusion Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.net Script : DomPHP Version : 0.81 Site : http://www.domphp.com Download : http://www.domphp.com/download/cat.php?idcat=1 Vulnerable CODE : /aides/index.p...

DomPHP 0.81 - 'index.php' Remote File Inclusion

DomPHP v0.81 Remote File Inclusion Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.net Script : DomPHP Version : 0.81 Site : http://www.domphp.com Download : http://www.domphp.com/download/cat.php?idcat=1 Vulnerable CODE : /aides/index.php if isset$GET'page'...

DomPHP 0.81 (index.php page) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ DomPHP 0.81 index.php page Remote File Inclusion Vulnerability ================================================================ DomPHP v0.81 Remote File Inclusion Vulnerabili...

Sql injection

SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the pid parameter in a profile page possibly profile.php...

CVE-2008-0186

Cross-site scripting XSS vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144...

CVE-2008-0184

CVE-2008-0184 affects Sys-Hotel on Line System. Affects the index.php file where an absolute path traversal can occur via an encoded slash (%2F) in the file parameter, enabling remote reading of arbitrary files. The NVD entry lists a Network attack vector with Low complexity and no authentication...

CVE-2008-0186

CVE-2008-0186 is an XSS vulnerability in NetRisk 1.9.7 (and possibly earlier) affecting index.php. The issue allows remote attackers to inject arbitrary web script or HTML through the page parameter. The affected product is NetRisk; root cause is reflected/scriptable input via the page parameter ...

CVE-2008-0185

CVE-2008-0185 affects NetRisk 1.9.7 (and possibly earlier) and is caused by an SQL injection in index.php where the pid parameter in a profile page (profile.php) is not properly sanitized. This allows remote attackers to execute arbitrary SQL commands. The NVD entry documents a base score of 7.5 ...

CVE-2008-0155

Cross-site scripting XSS vulnerability in index.php in EvilBoard 0.1a Alpha allows remote attackers to inject arbitrary web script or HTML via the c parameter...

Sql injection

SQL injection vulnerability in index.php in EvilBoard 0.1a Alpha allows remote attackers to execute arbitrary SQL commands the c parameter...

Path traversal

Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via encoded "/" %2F sequences in the link parameter...

Sql injection

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via 1 the useremail parameter and possibly 2 username parameter in a Members action...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in EvilBoard 0.1a Alpha allows remote attackers to inject arbitrary web script or HTML via the c parameter...

SineCms 'index.php'远程文件包含漏洞

BUGTRAQ ID: 27156 CNCAN ID:CNCAN-2008010810 SineCms是一款基于PHP的WEB应用程序。 SineCms不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'index.php'脚本对用户提交的'sineconfigindexmain'参数缺少过滤，提交远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 SineCms SineCms 2.3.5 SineCms SineCms 2.3.4 SineCms SineCms 2.3.2 SineCms SineCms 2.2...