CVE-2008-2416

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter in a Fiction action, possibly related to sources/fiction.class.php...

Netious CMS 0.4 (index.php pageid) SQL Injection Vulnerability

No description provided by source. Title :: Netious CMS 0.4 Remote SQL Injection Vulnerability Author :: InjEctOr s0f at w dot cn && ToTaL n.47 at hotmail.com discouvred by :: ToTaL Application :: Netious CMS 0.4 Download :: http://www.netious.com/sections/3/files/netious-cms-serv-0.4.zip Dork 1 ...

CVE-2008-2411: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action...

CVE-2008-2416: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter in a Fiction action, possibly related to sources/fiction.class.php...

CVE-2008-2398

The AppServ Open Project (version 2.5.10 and earlier ) is vulnerable to a Cross-Site Scripting (XSS) vulnerability within the index.php file. The root cause is the improper neutralization of user-supplied input via the appservlang parameter, which allows remote attackers to inject arbitrary web s...

CVE-2008-2396: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in an arbitrary element of the PAGES array parameter...

CVE-2008-2398: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter...

ComicShout 2.5 (index.php comic_id) Remote SQL Injection Vulnerability

No description provided by source. ComicShout Remote 2.5 SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x-info niiubatbl4ck-b0x.info Exploit: /index.php?comicid=-1+UNION+SELECT+1,2,3,concatsiteadmin,char58,sitepass,5,6+FROM+setup/ Admin PA: admin.php Greetz: dun - sidpsycho -...

microSSys CMS <= 1.5 Remote File Inclusion Vulnerability

No description provided by source. microSSys CMS = 1.5 Remote File Inclusion Vulnerability Software site: http://wajox.com/ =============================================================== By Raz0r www.Raz0r.name =============================================================== Vulnerable code...

Sql injection

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands via the postid parameter...

Directory traversal

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

Sql injection

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the 1 langid and 2 menuid parameters...

CVE-2008-2351

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the 1 langid and 2 menuid parameters...

CVE-2008-2356

The CVE-2008-2356 entry concerns an SQL injection in index.php of Archangel Weblog 0.90.02 and earlier, exploitable via the post_id parameter to allow remote execution of arbitrary SQL commands. Affected software is Archangel Weblog (version 0.90.02 and earlier); the underlying vulnerability is i...

MX-System 2.7.3 - index.php SQL Injection

MX-System 2.7.3 - index.php SQL Injection Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC :...

CVE-2008-2355: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...

MX-System 2.7.3 - 'index.php' SQL Injection

Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC : http://target/path/index.php?page=-1+union+select+1,2,3,4,5,concatwschar58,version,user,now/...

ComicShout 2.5 (index.php comic_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== ComicShout 2.5 index.php comicid Remote SQL Injection Vulnerability ====================================================================== Exploit:...

CVE-2008-2352: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

MX-System 2.7.3 (index.php page) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability =================================================================== Name : MX-System 2.7.3 index.php page...