CVE-2012-3790

CVE-2012-3790 is an XSS vulnerability in Adiscon LogAnalyzer. The affected software is LogAnalyzer, specifically versions before 3.4.4 and 3.5.x before 3.5.5, where a cross-site scripting flaw can be triggered via the highlight parameter in the index.php Search action. The underlying issue allows...

CVE-2012-3790: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5.x before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter in a Search action...

VANA CMS - index.php Script SQL Injection

VANA CMS - index.php Script SQL Injection source: https://www.securityfocus.com/bid/54066/info VANA CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise...

PHP Decoda 3.3.1 - Local File Inclusion

PHP Decoda 3.3.1 - Local File Inclusion Exploit Title: php-decoda local file inclusion Date: 16/06/2012 Author: Number 7 Software Link: http://milesj.me/code/php/decoda Version: 3.3.1 Tested on: linux Exp: http://localhost/milesj-php-decoda/index.php?view=../../../../../../../etc/passwd%00 Line 1...

ADICO - index.php Script SQL Injection

ADICO - index.php Script SQL Injection source: https://www.securityfocus.com/bid/54023/info ADICO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Della CMS SQL Injection

-------------------- IN The NAme OF God -------------------- -====della Cms Sql Injection====- Exploit Title: della Cms Sql Injection Exploit Author: Mr.XpR Tested on: BackTrack MAil : No0PMatyahoodotcom -====Dork====- inurl:index.php?node= inurl:index.php?node=&lng= -====Exploit====-...

A hotel CMS sql inj 0day-vulnerability warning-the black bar safety net

White-box in some sense, also TM is the individual force of life, the MVC framework let a person see uncomfortable. poc: 1. index. php? m=liansuohotel&cityid=5 3%20and%2 0 1=2%20union%20select%2 0 1,concatusername,0x3a,password,3,4,5,6,7,8,9,1 0%20from%20zhunaadmin Copy the code Keywords: 1...

Cross site scripting

Cross-site scripting XSS vulnerability in Support Incident Tracker SiT! 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message...

CVE-2012-1413: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in zcinstall/includes/modules/pages/databasesetup/headerphp.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the dbusername parameter to zcinstall/index.php...

PT-2012-3542

Name of the Vulnerable Software and Affected Versions OSCommerce Online Merchant version 3.0.2 Description A cross-site scripting XSS issue exists in the software during installation, allowing remote attackers to inject arbitrary web script or HTML via the name parameter to "oscommerce/index.php"...

CVE-2012-2235: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Support Incident Tracker SiT! 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message...

PT-2012-3896

Name of the Vulnerable Software and Affected Versions Support Incident Tracker SiT! versions 3.65 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to "index.php", which is not properly handled in an error...

PT-2012-3240

Name of the Vulnerable Software and Affected Versions Zen Cart versions 1.5.0 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the db username parameter to "zc install/index.php". This occurs when the software is...

PT-2012-4378

Name of the Vulnerable Software and Affected Versions Pligg CMS versions prior to 1.2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved through several parameters in different actions and files, including the "list" parameter in a move action ...

PHP Address Book Multiple Cross Site Scripting Vulnerabilities

This host is running PHP Address Book and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodphpaddressbookmultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ PHP Address Book Multiple Cross Site Scripting Vulnerabilities Authors: Sooraj KS Copyright:...

AFFY (index.php) Blind Sql Injection Vulnerability

Exploit for php platform in category web applications AFFY index.php Blind Sql Injection Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.affy.no/ .:. Drok : inurl:"index.php?groupid" "powered ...

YDFramework 2.0-Beta1 File Disclosure

Author : L3b-r1'z Site : Exploit4arab.com Title : YDFramework-2.0-beta1 Local File Disclosure Downalod : http://developer.berlios.de/project/showfiles.php?groupid=3988&releaseid=6710 Google Dork : N/A P0c : http://localhost/index.php?id=./database/config.php Greet'z : All My Friend's , And...

CVE-2012-2922

The requestpath function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q parameter to index.php, which reveals the installation path in an error message...

CVE-2012-2906: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo r422 allow remote attackers to inject arbitrary web script or HTML via the 1 addimgnamepost, 2 asciiartpost, 3 expediteur, 4 titresav, or 5 z39d27af885b32758ac0e7d4014a61561 parameter...

CVE-2012-2901: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Profile List in the Joomla Content Editor JCE component before 2.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the search parameter to administrator/index.php...