CVE-2007-4918

SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to index.php...

Vulnerability in Nucleus

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Nucleus. XSS: Уязвимость на странице index.php в параметре archive. http://site/index.php?blogid=1&archive=2007-01-013Cscript3Ealertdocument.cookie3C/script3E Дополнительная информация о данной уязвимости у меня н...

JBlog 1.0 (index.php id) Remote SQL Injection Exploit

No description provided by source. Script....................................: JBlog ver 1.0 Script Site...........................: http://www.jmuller.net/jblog/index.php Vulnerability........................: Remote SQL injection Exploit Access..................................: Remote...

Gelato - 'index.php?post' SQL Injection

m...

JBlog 1.0 (index.php id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== JBlog 1.0 index.php id Remote SQL Injection Exploit ===================================================== Script....................................: JBlog ver 1.0 Script...

JBlog 1.0 - index.php?id SQL Injection

JBlog 1.0 - index.php?id SQL Injection Script....................................: JBlog ver 1.0 Script Site...........................: http://www.jmuller.net/jblog/index.php Vulnerability........................: Remote SQL injection Exploit Access..................................: Remote...

Sql injection

SQL injection vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action...

CVE-2007-4835

The CVE-2007-4835 entry describes an SQL injection in phpMyQuote 0.20, exploitable via the id parameter in an edit action of index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, as indicated by the description and multiple sources (NVD entry). The root cause is ...

CRS Manager ($DOCUMENT_ROOT) Multi Remote File Include

X---- w w w . u N k n 0 w n . e u ----X CRS Managercrsmanager Multi Remote File Include ::Home: http://crsmanager.berlios.de ::Vuln Type : Remote File Include RFI ::Discovered by : iNs ::Vuln Code: index.php login.php ?php require $DOCUMENTROOT."/../admin/settings/conf.php"; PoC:...

Txx CMS 0.2 - Multiple Remote File Inclusions

:::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | // :::::::::::::::::::::::::::::We...

RW::Download 2.0.3 lite - index.php?dlid SQL Injection

RW::Download 2.0.3 lite - index.php?dlid SQL Injection RW::Download v2.0.3 lite - Remote SQL Injection Vendor : http://www.rwscripts.com/ Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Dork : "Powered by RW::Download v2.0.3 lite"...

eNetman 20050830 - index.php Remote File Inclusion

eNetman 20050830 - index.php Remote File Inclusion Title : eNetman - The Enchanced Network Manager Remote File Inclusion URL : http://freshmeat.net/projects/enetman/ Author : JaheeM Exploit : senetman/html/index.php?page= Thanks To : asc, IRC.ASCNET.BIZ milw0rm.com 2007-09-03...

eNetman v.20050830 (index.php page) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= eNetman v.20050830 index.php page Remote File Inclusion Vulnerability ======================================================================= Title : eNetman - The...

CVE-2007-4641

CVE-2007-4641 affects Pakupaku CMS 0.4 and earlier. A directory traversal flaw in index.php allows remote attackers to include and execute arbitrary local files by manipulating the page parameter with .., demonstrated by injecting code into an Apache log file. This enables partial confidentiality...

CVE-2007-4645

CVE-2007-4645 affects NMDeluxe 2.0.0; SQL injection vulnerability in index.php (via the newspost do action id parameter) allows remote attackers to execute arbitrary SQL commands. Root cause appears to be unsanitized input used in SQL queries. The provided connected documents confirm the version ...

CVE-2007-4627

CVE-2007-4627 describes an SQL injection in ABC eStore 3.0’s index.php, exploitable via the cat_id parameter to execute arbitrary SQL. Root cause: unsafe SQL construction in index.php. Impact stated as partial confidentiality, integrity, and availability. NVD/metrics cite a CVSS v2 base score 7.5...

CVE-2007-4603

Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the aid parameter in a showarticle action or 2 the catid parameter in a showcat action...

CVE-2007-4597

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL commands via the scid parameter in a searchlist action, a different vector than CVE-2007-2549...

NMDeluxe 2.0.0 - 'id' SQL Injection

not sec group http://www.notsec.com [email protected] NMDeluxe 2.0.0 Class: SQL Injection Found: 30/08/2007 Remote: Yes Site: http://www.wsdeluxe.com/nmdeluxe/ Download: http://downloads.sourceforge.net/nmdeluxe/nmdeluxe2.0.0.zip?modtime=1178396844&bigmirror=0 Vulnerable code: index.php...

ACG News 1.0 (aid/catid) Remote SQL Injection Vulnerabilities

No description provided by source. ACG News SQL Injection Software: ACG News 1.0 Vendor link: http://www.altercoder.com Vendor Demo link: http://acgnews.uw.hu/index.php Attack: SQL Injection Original Advisory: http://14house.blogspot.com/2007/08/acg-news-sql-injection.html Discovered by: David...