Sql injection

SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter...

Directory traversal

Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the module parameter...

CVE-2008-2837

SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter...

CVE-2008-2839

Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...

CVE-2008-2837

SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter...

Unfixed XSS vulnerability at www.worldenergy.ru

Security researcher THEMILLER, has submitted on 24/06/2008 a cross-site-scripting XSS vulnerability affecting www.worldenergy.ru, which at the time of submission ranked 1982897 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is...

HiveMaker Directory (index.php cid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== HiveMaker Directory index.php cid SQL Injection Vulnerability =============================================================== proud to be muslim rEm0te sql injction...

MyBizz-Classifieds 'index.php' SQL注入漏洞

BUGTRAQ ID: 29798 CNCAN ID：CNCAN-2008062304 MyBizz-Classifieds是一款基于PHP的WEB应用程序。 MyBizz-Classifieds不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'index.php'脚本对用户提交给"cat"参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 MyBizz-Classifieds 目前没有详细解决方案提供： http://www.mybizz-classifieds.com/...

PageSquid CMS (index.php page) Remote SQL Injection Vulnerability

No description provided by source. ===================================================================== PageSquid CMS index.php page Remote SQL Injection Vulnerability ===================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

cmsmini-lfi.txt

===================================================== CMS Mini 0.2.2 Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

HoMaP-CMS 0.1 (index.php go) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== HoMaP-CMS 0.1 index.php go Remote SQL Injection Vulnerability ===============================================================...

HoMaP-CMS 0.1 - go SQL Injection

HoMaP-CMS 0.1 - go SQL Injection -------------------------------------------------------------------------------------------------------------------------------- // HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability // Author: SxCx // Download: SourceForge.net // Version affected: 0.1 //...

Demo4 CMS (index.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Demo4 CMS index.php id Remote SQL Injection Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| -------...

homap-sql.txt

-------------------------------------------------------------------------------------------------------------------------------- // HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability // Author: SxCx // Download: SourceForge.net // Version affected: 0.1 // Exploit:...

Basic-CMS 'index.php' SQL注入漏洞

BUGTRAQ ID: 29771 CNCAN ID：CNCAN-2008061901 BASIC-CMS是一款基于PHP的WEB应用程序。 BASIC-CMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'index.php'脚本对用户提交给'pageid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 BASIC-CMS 目前没有解决方案提供： http://www.basic-cms.de/...

Bizon-CMS 'photo/index.php' SQL注入漏洞

BUGTRAQ ID: 29770 CNCAN ID：CNCAN-2008061902 Bizon-CMS是一款基于PHP的WEB应用程序。 Bizon-CMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'photo/index.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Bizon-Soft Development Laboratory Bizon-CMS 2.0 漏洞提供者 Mr.SQL [email protected]...

FreeCMS 'index.php' SQL注入漏洞

BUGTRAQ ID: 29773 CNCAN ID：CNCAN-2008061903 FreeCMS是一款基于PHP的WEB应用程序。 FreeCMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'index.php'脚本对用户提交给'page'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 FreeCMS.us FreeCMS 0.2 目前没有解决方案提供： http://www.freecms.us/...

PHP KnowledgeBase Script 2.4 (cat_id) SQL Injection Vulnerability

No description provided by source. PROUD TO BE MUSLIM Remote SQL Injection Vulnerability Knowledge Base Software Overview index.php catid AuTh0r : S.L TEAM FA6@L 3RROR --- H3B@R13H H0ME : WwW.MALAKSOFT.CoM Script : Knowledge Base Software Overview site : www.kblance.com -:: SQL ::- www.site.com/...

FireAnt 1.3 (index.php page) Local File Inclusion Vulnerability

No description provided by source. Name : FireAnt v1.3 Local File Inclusion Vulnerability Author : cOndemned Dork : use Your brain : Greetz : ZaBeaTy, str0ke, GregStar, irk4z, Sandtalker & Avantura ; Source : // index.php 8. $page = "buglist"; //default page 9. if !empty$GET'page' 10. $page =...

phpAuction 3.2.1 (item.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= phpAuction 3.2.1 item.php id Remote SQL Injection Vulnerability ================================================================= phpauction-gpl Version3.2 Version SQL...