WebPortal CMS 0.6.0 - index.php SQL Injection

WebPortal CMS 0.6.0 - index.php SQL Injection !/usr/bin/perl -w WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die "-LWP::UserAgent error.\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0;...

WebPortal CMS <= 0.6.0 (index.php m) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die...

IPTBB 0.5.4 - 'id' SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...

w-Agora <= 4.2.1 (cat) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= w-Agora = 4.2.1 cat Remote SQL Injection Vulnerability ========================================================= W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes...

SanyBee Gallery 0.1.1 - 'p' Local File Inclusion

SanyBee Gallery 0.1.1 p local File Inclusion Script Name: SanyBee Gallery 0.1.1 D.Script: http://www.easy-script.com/scripts-dl/SanyBeeGalleryV0.1.0.zip Discovered by: jackal contact: [email protected] ==Exploit== ================================================================...

SanyBee Gallery 0.1.1 - p Local File Inclusion

SanyBee Gallery 0.1.1 - p Local File Inclusion SanyBee Gallery 0.1.1 p local File Inclusion Script Name: SanyBee Gallery 0.1.1 D.Script: http://www.easy-script.com/scripts-dl/SanyBeeGalleryV0.1.0.zip Discovered by: jackal contact: [email protected] ==Exploit==...

CVE-2007-6577

Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the categ parameter in a categ action or 2 the article parameter in an articles action...

CVE-2007-6586

SQL injection vulnerability in sezionenews.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a sezione page action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the categ parameter in a categ action or 2 the article parameter in an articles action...

Sql injection

SQL injection vulnerability in sezionenews.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a sezione page action to index.php...

CVE-2007-6582

Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter in a page mode action...

CVE-2007-6577

Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the categ parameter in a categ action or 2 the article parameter in an articles action...

Sql injection

Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL commands via 1 the from parameter to index.php or 2 the page parameter to update.php...

CVE-2007-6560

Multiple cross-site scripting XSS vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via 1 the newconfname parameter to profiles.php or 2 the conf parameter to index.php...

ZeusCMS &lt;= 0.3 Remote Blind SQL Injection Exploit

No description provided by source. ? / ------------------------------------------------- ZeusCMS = 0.3 Remote Blind SQL Injection Exploit ------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.zeuscms.gr/ details..: works with...

CVE-2007-6552

AuraCMS 2.2 contains a directory traversal vulnerability in index.php: remote authenticated users can include and execute arbitrary local files by supplying a .. (dot dot) in the act parameter, potentially involving the news pilih component. The example given is including admin/admin_users.php to...

pnphpbb2-lfi.txt

.-----------------------------------------------------------------------------. | vuln.: PNphpBB2 = 1.2i printview.php phpEx Local File Inclusion Vuln. | | download: http://www.pnphpbb.com/ | | dorks: Powered by PNphpBB2 / Powered por PNphpBB2 | | inurl:"index.php?name=PNphpBB2" | | | | author:...

CVE-2007-6559

Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL commands via 1 the from parameter to index.php or 2 the page parameter to update.php...

CVE-2007-6545

Multiple cross-site scripting XSS vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via 1 the subject parameter to modules/news/submit.php; 2 the PATHINFO to modules/news/index.php, possibly related to the XoopsPageNav class; or 3 an avatar image...

CVE-2007-6539

The CVE-2007-6539 entry concerns a PHP local file inclusion in the IDevspot iSupport 1.8 product. The vulnerability arises from index.php’s include_file parameter, enabling remote attackers to include local files. Documented impact is partial confidentiality, integrity, and availability, with a C...