7216 matches found
Design/Logic Flaw
Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from index.php...
CVE-2007-4046
SQL injection vulnerability in index.php in the Pony Gallery componygallery 1.5 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-4046
CVE-2007-4046 is a SQL injection vulnerability in the Pony Gallery (com_ponygallery) for Joomla! 1.5 and earlier, exploitable via the catid parameter in index.php. Remote attackers could execute arbitrary SQL commands. Documents confirm affected software and an exploit/disclosure trail (e.g., exp...
CVE-2007-4028
Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of these details are obtained from third party information...
CVE-2007-4028
CVE-2007-4028 affects Webspell 4.01.02. A vulnerability in index.php allows absolute path traversal, enabling remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. CVSS v2 base score 7.5 (HIGH): Network vector, no authentication, low attack compl...
CVE-2007-3968
index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name...
Sql injection
SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action...
Sql injection
SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter...
CVE-2007-3976
SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter...
CVE-2007-3981
CVE-2007-3981 : SQL injection in index.php of WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action. Connected documents confirm the vulnerability details; no remediation or exploit status provided in the sources.
CVE-2007-3976
CVE-2007-3976 affects bwired where SQL injection is possible in index.php via the newsID parameter. The underlying issue is improper handling of the newsID input, allowing remote attackers to craft arbitrary SQL commands. Impact is described as arbitrary SQL execution; the connected materials do ...
CVE-2007-3976
SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter...
CVE-2007-3981
SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action...
CVE-2007-3968
CVE-2007-3968 affects the dirLIST project prior to version 0.1.1. A remote attacker can cause disclosure of directory contents by issuing a crafted URL containing an excluded folder name. This yields partial confidentiality impact (C:N/I:N/A:L per CVSS v3.1) with network access and no authenticat...
articledir-rfi.txt
dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected] greetz:d3hydr8, whoami pace...
Article Directory - index.php Remote File Inclusion
Article Directory - index.php Remote File Inclusion dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected]...
Article Directory (index.php page) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Article Directory index.php page Remote File Inclusion Vulnerability ======================================================================...
Sql injection
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...
blogsite-sql.txt
--==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK:...
