CVE-2010-2336

index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root via the download parameter...

CVE-2010-2335

CVE-2010-2335 describes a SQL injection in Yamamah Photo Gallery 1.00 (pre-20100618) via the news parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. The description confirms the vulnerable component (index.php, news parameter) and the affected version range, with...

ShopEx index.php脚本目录遍历漏洞

ShopEx是在国内非常流行的网上商店平台软件。 ShopEx的index.php脚本没有正确地过滤用户所提交的请求，远程攻击者可以通过在请求参数中包含目录遍历序列读取指定位置的文件。 ShopEx 4.8.5 ShopEx 4.8.4 厂商补丁： 上海商派网络科技有限公司 ------------------------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.shopex.cn/index.html...

Directory traversal

Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System SMS 2.6.10, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the page parameter to index.php. NOTE: some of these details are obtained from third party...

CVE-2010-2319

CVE-2010-2319 affects IDevSpot TextAds 2.08. The vulnerability is a SQL injection in index.php where the attack vector is the page parameter , enabling remote attackers to execute arbitrary SQL commands. The sources consistently describe this as a SQLi vulnerability without detailing exploit step...

Sql injection

SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action...

CVE-2010-2312

CVE-2010-2312 is a SQL injection vulnerability in the HauntmAx Haunted House Directory Listing CMS. The issue is in index.php and allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action. The available sources confirm the vulnerability description but...

CVE-2010-2281

TomatoCMS 2.0.6 is affected by multiple XSS in index.php. Exploitable through (1) keyword or (2) bannerid with /admin/ad/banner/list, and through (3) title or (4) answers with /admin/poll/add, or (5) name with /admin/category/add. Root cause: unsanitized input in these parameters leading to scrip...

MyOWNspace v8.2 local file include & File Disclosure Vulnerability

Exploit for php platform in category web applications ================================================================== MyOWNspace v8.2 local file include & File Disclosure Vulnerability ================================================================== Exploit Title: MyOWNspace v8.2 local file...

Yamamah 1.0 SQL Injection / Source Disclosure

Exploit Title: Yamamah Mullti Vulnerability Date: 9-06-2010 Author: anT!-Tr0J4n My Home : www.Dev-PoinT.com Software Link:http://www.yamamah.org Version: 1.00 Tested on: Win7/Linux DorK : N / A ========== Exploit By anT!-Tr0J4n============ =======Yamamah source code disclosure Vulnerability...

Sql injection

Multiple SQL injection vulnerabilities in phpCommunity 2 2.1.8, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the forumid parameter in a forum action to index.php, 2 the topicid parameter in a forum action to index.php, 3 the wert parameter in an ...

Sql injection

SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL commands via the 1 baseid or 2 courseid parameter in a search action...

CVE-2009-4891

CS-Cart 2.0.0 Beta 3 is affected by an SQL injection in index.php via the product_id parameter in the products.view action. The vulnerability allows remote attackers to execute arbitrary SQL commands on the backend. The issue is documented across multiple sources (e.g., Exploit-DB exploit 8184 an...

CVE-2009-4883

PHPRecipeBook is vulnerable to an SQL injection in index.php via the base_id and course_id parameters in a search action on versions 2.24 and 2.39. Root cause: insufficient input sanitization before using values in SQL queries. Impact: remote attackers could alter queries and access/modify data, ...

CVE-2009-4884

Multiple SQL injection vulnerabilities in phpCommunity 2 2.1.8, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the forumid parameter in a forum action to index.php, 2 the topicid parameter in a forum action to index.php, 3 the wert parameter in an ...

CMSQlite 'index.php' SQL Injection and Directory Traversal Vulnerabilities

CMSQlite is prone to multiple SQL injection and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RTRandomImage - Remote File Inclusion

|| || | || o,7 || . o7 || 4||| ow, : / / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

CVE-2010-2147

Cross-site scripting XSS vulnerability in the My Car commycar component 1.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the modveh parameter to index.php...

Sql injection

SQL injection vulnerability in the My Car commycar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pagina parameter to index.php...

CVE-2010-2147

Cross-site scripting XSS vulnerability in the My Car commycar component 1.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the modveh parameter to index.php...