CVE-2010-2143

CVE-2010-2143 : Symphony CMS is vulnerable to a directory traversal in the index.php file’s mode parameter, allowing remote attackers to read arbitrary files and potentially impact the server. Affected: Symphony CMS 2.0.7 (and references to 2.0.6), with root cause described as unsanitized input d...

帝国（EmpireCMS）6.0 /search/keyword/index.php 存在多个跨站漏洞

帝国软件是一家专注于网络软件开发的科技公司，其主营产品“帝国网站管理系统EmpireCMS”是目前国内应用最广泛的CMS程序。通过多年的不断创新与完善，使系统集安全、强大、稳定、灵活于一身。 目前EmpireCMS程序已经广泛应用在国内数十万家网站，覆盖国内上千万上网人群，并经过上千家知名网站的严格检测，被称为国内最稳定的CMS系统。 /search/keyword/index.php 存在多个跨站漏洞 http://ssvdb.com/search/keyword/index.php?show=3"xss...

Delivering Digital Media CMS SQL Injection

Title: Delivering Digital Media CMS SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A N.A.S.T ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Delivering Digital Media CMS SQL Injection Vulnerability ! Author ...

OCS Inventory NG Multiple SQL Injection Vulnerabilities

This host is running OCS Inventory NG and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodocsinventoryngmultsqlinjvulnmay10.nasl 5394 2017-02-22 09:22:42Z teissa $ OCS Inventory NG Multiple SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

Cosmos Solutions CMS - 'id=' / 'page=' SQL Injection

Cosmos Solutions cms SQL Injection Vulnerability Vendor:http://www.cosmossolutions.net/ Discovered by : gendenk Site : http://jatimcrew.org Dork : "Webdesign Cosmos Solutions" Exploit : site/pinf.php?page=SQL Injection Exploit : site/index.php?id=SQL Injection Demo:...

Joomla Component com_bfquiztrial SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Component combfquiztrial SQL Injection Vulnerability ============================================================ :::::::::::::::::::::::::::::::::::::: 0x1...

Unfixed XSS vulnerability at www.dup3.me

Security researcher internet, has submitted on 28/05/2010 a cross-site-scripting XSS vulnerability affecting www.dup3.me, which at the time of submission ranked 417759 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2010. It is currently...

Joomla Reservations Cross Site Scripting

Exploit Title: Joomla Component Reservations XSS Vulnerability Date: 28th May 2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla...

Joomla Component com_reservations XSS Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Component Reservations XSS Vulnerability =============================================== :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Informati...

CVE-2010-2096

Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CVE-2010-2096

CVE-2010-2096 is a directory traversal vulnerability in CMSQlite

toronja cms SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================= toronja cms SQL Injection Vulnerability ======================================= .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || toronja cms SQL...

Spaceacre - index.php SQL Injection HTML Cross-Site Scripting Injection

Spaceacre - index.php SQL Injection HTML Cross-Site Scripting Injection ------------------------------------------------------------------------------------------- Spaceacre index.php SQL/HTML/XSS Injection Vulnerability...

Spaceacre - '/index.php' SQL Injection / HTML / Cross-Site Scripting Injection

------------------------------------------------------------------------------------------- Spaceacre index.php SQL/HTML/XSS Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Script Home: http://www.spaceacre.com Do...

Sql injection

SQL injection vulnerability in index.php in JE CMS 1.0.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewcategory action. NOTE: some of these details are obtained from third party information...

CVE-2010-2047

CVE-2010-2047 (JE CMS) : A SQL injection vulnerability exists in JE CMS versions 1.0.0 and 1.1 in index.php, exploitable via the categoryid parameter in a viewcategory action. This allows remote attackers to craft SQL payloads and potentially execute arbitrary SQL commands. The documents do not p...

CVE-2010-2041

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary web script or HTML via the 1 description and 2 lastaction parameters...

CVE-2010-2036

Directory traversal vulnerability in the Percha Fields Attach comperchafieldsattach component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2038

Cross-site scripting XSS vulnerability in include/tool/editingfiles.php in gpEasy CMS 1.6.2 allows remote authenticated users, with Edit privileges, to inject arbitrary web script or HTML via the gpcontent parameter to index.php. NOTE: some of these details are obtained from third party informati...

CVE-2010-2041

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary web script or HTML via the 1 description and 2 lastaction parameters...