CVE-2009-2302

CVE-2009-2302 describes a cross-site scripting (XSS) vulnerability in the PHP index.php of Aardvark Topsites PHP. The issue allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action for versions 5.2.0 and earlier, with 5.2.1 also reported as affected. T...

CVE-2009-2289

CVE-2009-2289 is an XSS vulnerability in Arcade Trade Script 1.0 beta, impacting index.php where the q parameter in a gamelist action can be exploited to inject arbitrary script/HTML. The issue is documented in multiple sources (e.g., NVD entry) and arises from insufficient input sanitization in ...

CVE-2009-2263

Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathnam...

tsep 0.942.02 - Multiple Vulnerabilities

tsep 0.942.02 - Multiple Vulnerabilities TSEP "0" && $percent = "100" 62: $sqlins = "INSERT INTO $dbtablename alttag,display,valuepercent,imageshow,comment 63: VALUES '$alt','$display',...

SIPS v0.2.2 Remote File Inclusion Vulnerability

/=============================================================================================================================================== | | o SIPS v0.2.2 Remote File Inclusion Vulnerability | | Software : SIPS v0.2.2 | Vendor : http://www.phpscripts-fr.net/scripts/hosted/sips022.zip |...

PHP-Sugar 0.80 (index.php t) Local File Inclusion Vulnerability

No description provided by source. =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=- script: PHP-Sugar 0.80 ----------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://php-sugar.net/files/?mod=files...

PHP-Sugar 0.80 (index.php t) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP-Sugar 0.80 index.php t Local File Inclusion Vulnerability =============================================================== =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=...

PHP-Sugar 0.80 - index.php?t Local File Inclusion

PHP-Sugar 0.80 - index.php?t Local File Inclusion =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=- script: PHP-Sugar 0.80 ----------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://php-sugar.net/files/?mod=files...

CVE-2008-6839

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

CVE-2008-6839

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

Mega File Manager 1.0 (index.php page) LFI Vulnerability

Exploit for unknown platform in category web applications ======================================================== Mega File Manager 1.0 index.php page LFI Vulnerability ======================================================== + Mega File Manager 1.0 index.php page Local File Inclusion...

CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

Sql injection

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2009-2151

Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. dot dot in the newlang parameter...

CVE-2009-2100

Directory traversal vulnerability in the JoomlaPraise Projectfork comprojectfork component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php...

CVE-2009-2100

Directory traversal vulnerability in the JoomlaPraise Projectfork comprojectfork component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php...

CVE-2009-2107

Webmedia Explorer (webmex) is affected by CVE-2009-2107 across versions 5.0.9 and 5.10.0, with multiple XSS in index.php. The root cause is insufficient sanitization of user-supplied data, allowing attackers to inject script via parameters such as search, tag, bookmark, and remember, among others...

Uebimiau Web-Mail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities

No description provided by source. Uebimiau Webmail = v3.2.0-1.8 Remote File / Overwrite Vulnerabilities Dork : Uebimiau Webmail v3.2.0-1.8 POC : /uebimiau/admin/editor.php?load=config And You Can Write Any Code As ?php passthru$GETcmd; ? After That Click Write To File Go /uebimiau/index.php?cmd=...

CVE-2009-2033

CVE-2009-2033: XSS in Yogurt 0.3, via index.php msg parameter. Vulnerable component is index.php; root cause is input not sanitized, enabling remote injection of script/HTML. No remediation details provided in the supplied documents; exploitation status not specified.