CVE-2009-4945

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

Default credentials

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

GMDS CMS (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ GMDS CMS index.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

D-Tekweb (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ D-Tekweb index.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

Sql injection

SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artistid parameter in an addalbum action...

CVE-2010-2714

SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter...

CVE-2010-2721

CVE-2010-2721 affects RightInPoint Lyrics Script 3.0. The vulnerability is a SQL injection in index.php via the artist_id parameter in an addalbum action, allowing remote attackers to execute arbitrary SQL commands. This is documented in multiple sources (e.g., NVD entry). The provided connected ...

CVE-2010-2722

CVE-2010-2722 describes an XSS vulnerability in RightInPoint Lyrics Script 3.0 (index.php) where the attacker can inject arbitrary script via the artist_id parameter, due to inadequate handling of data in a forced SQL error message. The affected component is the web interface’s index.php for Lyri...

Koobi CMS SQL Injection

===================================================== Koobi CMS index.php SQL Injection Vulnerability ===================================================== /\ \ /\ \ /\ \ /'\ /\ /\ /\ \ /\ \ /\ \ \ ,\L\//\ / \ \ \ /\L\ \ \ \ \ \ /\//\ / \ \ /\ \ /\ \ \ \ \ \ \ \ //\ \ , \ \ // \ \ ...

Oracle Secure Backup Administration Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to inject arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability but may be bypassed. The specific flaw exists in the handling of the 'preauth' variable to the script index.php use...

BigThink XT (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== BigThink XT index.php SQL Injection Vulnerability =================================================== /\ \ /\ \ /\ \ /'\ /\ /\ /\ \ /\ \ /\ \ \ ,\L\//\ / \ \ \ /\L\ \ \ \ \ \ /\//\ /...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

Sardus (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Sardus index.php Blind SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

CVE-2009-4934

Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

LojaDoSite Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ LojaDoSite Blind SQL Injection Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Joomla Component com_sef LFI Vulnerability

Exploit for php platform in category web applications ========================================== Joomla Component comsef LFI Vulnerability ========================================== Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomsef.zip Version: 0 Tested on: all OS CVE : 0...

Sandbox 2.0.2 - Local File Inclusion

: Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: + PoC:http://localhost/index.php?a=../../../../../etc/passwd%00...

Sandbox v2.0.2 Local FIle Inclusion Vulnerability

Exploit for php platform in category web applications ================================================= Sandbox v2.0.2 Local FIle Inclusion Vulnerability ================================================= : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.co...

Sandbox 2.0.2 - Local File Inclusion

Sandbox 2.0.2 - Local File Inclusion : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: +...

CVE-2010-2613

Cross-site scripting XSS vulnerability in the JExtensions JE Awd Song comawdsong component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, which is not properly handled in a view action to index.php...