13677 matches found
k_fileManager <= 1.2 (dwl_include_path) Remote Inclusion Vulnerability
No description provided by source. ================================================================= KfileManager v1.2 = dwlincludepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site :...
OpenBB 1.0/1.1 Index.PHP Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7401/info It has been reported that OpenBB does not properly check input passed via the 'index.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the...
Noah's Classifieds 1.2/1.3 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14833/info Noah's Classifieds is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query. Successful exploitation could result in a...
Plogger Beta 2 index.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15839/info Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities cou...
CMScout <= 1.23 (index.php) Remote SQL Injection Vulnerability
No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title CMScout = 1.23 SQL Injection Script Download...
CuteNews 1.4.6 index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that...
Lizge V.20 Index.PHP Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19533/info Lizge is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing...
ScriptMagix FAQ Builder <= 2.0 (index.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix FAQ Builder = 2.0 index.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 50$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print...
FusionPHP Fusion News 3.7 Index.PHP Remote File Include Vulnerability
No description provided by source...
PHP ICalender 2.22 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18721/info PHP iCalender is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser...
BirdBlog 1.x index.php page Parameter XSS
No description provided by source...
VBulletin 1.0.1 lite/2.x/3.0 /admincp/index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...
PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities
No description provided by source. Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal...
Koobi CMS 4.2.4/4.2.5/4.3.0 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0, 4.2.5, 4.2.4 Multiple Remote SQL Injection +==-- --==+====================================================================================+==-- +...
Invision Power Services Invision Gallery 1.0.1 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9944/info It has been reported that Invision Gallery may be prone to multiple sql injection vulnerabilities, allowing an attacker to influence SQL query logic. The issues exist due to insufficient sanitization of...
PHP Director <= 0.21 (sql into outfile) eval() Injection Exploit
No description provided by source. include stdio.h include stdlib.h include string.h include netinet/in.h include arpa/inet.h include netdb.h / Dork Powered by PHP Director 0.2 | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit-...
Back-End CMS 0.4.5 admin/index.php includes_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary...
Gizzar <= 03162002 (index.php) Remote File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '64305' ssvid version = '1.0' author = 'kikay' vulDate = '2006-12-13' createDate ...
phpmysport 1.4 (xss/sql) Multiple Vulnerabilities
No description provided by source. + PhpMySport v. 1.4 Multiple Remote Vulnerabilities XSS\SQL + Discovered by XaDoS - xados at hotmail dot it Th4nKs AlpHaNiX -Product site: http://phpmysport.sourceforge.net -Version vuln: 1.4latest and maybe + COD3: The code vuln is at page /memberlist.php SQL a...
WordPress Mz-jajak plugin <= 2.1 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Mz-jajak plugin = 2.1 SQL Injection Vulnerability Date: 2012-08-10 Author: StRoNiX E-mail: [email protected] Software Link: http://downloads.wordpress.org/plugin/mz-jajak.zip Version: 2.1 tested --------------- PoC POST data...