CVE-2008-2185

The CVE-2008-2185 entry describes a directory traversal vulnerability in SMartBlog (aka SMBlog) 1.3. The vulnerability is in index.php and allows remote attackers to include arbitrary local files through directory traversal sequences supplied in the page parameter. This leads to potential exposur...

CVE-2008-2185: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in SMartBlog aka SMBlog 1.3 allows remote attackers to include arbitrary local files via directory traversal sequences in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-2183: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in SMartBlog aka SMBlog 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter...

CVE-2008-2186: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Chilek Content Management System aka ChiCoMaS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2008-2184: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SMartBlog aka SMBlog 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 mois, 2 an, 3 jour, and 4 id parameters to index.php, and the 5 login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of...

AJ Classifieds 2008 - index.php SQL Injection

AJ Classifieds 2008 - index.php SQL Injection --==+================================================================================+==-- --==+ AJ Classifieds 2008 index.php Remote SQL Injection Vulnerability +==--...

CVE-2008-2129

SQL injection vulnerability in index.php in Galleristic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2129

CVE-2008-2129 concerns a SQL injection in index.php of Galleristic 1.0 when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to execute arbitrary SQL commands via the cat parameter. The initial sources list the affected software version and the input vector, but do not prov...

txtCMS 0.3 - index.php Local File Inclusion

txtCMS 0.3 - index.php Local File Inclusion txtCMS 0.3 index.php Local File Inclusion Exploit milw0rm.com 2008-05-09...

CVE-2008-2129: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Galleristic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a news action to index.php, a different vector than CVE-2007-6126...

CVE-2008-2117: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a news action to index.php, a different vector than CVE-2007-6126...

Galleristic 1.0 (index.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Galleristic 1.0 index.php cat Remote SQL Injection Exploit ============================================================ /', $request$i, $response; if!empty$response1 return...

Galleristic 1.0 - cat SQL Injection

Galleristic 1.0 - cat SQL Injection /', $request$i, $response; if!empty$response1 return $response1 . ''; Usage : Run in a browser as : http://yourbox/exploit.php?target=http://targetbox/path/ ifempty$GET'target' die'No target site specified!'; else for$c = 1; $c milw0rm.com 2008-05-07...

Galleristic 1.0 - 'cat' SQL Injection

/', $request$i, $response; if!empty$response1 return $response1 . ''; Usage : Run in a browser as : http://yourbox/exploit.php?target=http://targetbox/path/ ifempty$GET'target' die'No target site specified!'; else for$c = 1; $c milw0rm.com 2008-05-07...

CVE-2008-2095

CVE-2008-2095 describes an SQL injection in the FlippingBook (com_flippingbook) 1.0.4 component used with Joomla!. The vulnerability affects the index.php file and allows a remote attacker to execute arbitrary SQL commands by manipulating the book_id parameter. The provided connected documents co...

CVE-2008-2093: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Profiler comcomprofiler component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php...

CVE-2008-2095: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the FlippingBook comflippingbook 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

CVE-2008-2081

The CVE-2008-2081 entry documents a directory traversal (Local File Inclusion) in index.php of Siteman 2.0.x2. The issue, exploitable by remote authenticated administrators via a .. in the module parameter, enables inclusion and execution of arbitrary local files. Root cause: insufficient input s...

Miniweb 2.0 - historymonth SQL Injection

Miniweb 2.0 - historymonth SQL Injection Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Modu...