EasyGallery <= 5.0tr Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== EasyGallery "alert"JosS + Cross Site Scripting: Vuln File: index.php Exploit: http://localhost/PATH/staticpages/easygallery/index.php?help=about&q=XSS Example: %22+onmouseover=alert"JosS...

Joomla Component ProductShowcase <= 1.5 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component ProductShowcase = 1.5 SQL Injection Vulnerability =================================================================== Joomla Component comproductshowcase...

Joomla Component Candle 1.0 (cID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Joomla Component Candle 1.0 cID SQL Injection Vulnerability ============================================================= JOOMLA comcandle SQL Injectioncid DORK 1 :...

CVE-2008-1178: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2008-1119...

Sql injection

SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action...

Sql injection

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the modprojectid parameter in a projectdetail action...

CVE-2008-1164

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the modprojectid parameter in a projectdetail action...

CVE-2008-1165

Multiple cross-site scripting XSS vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script or HTML via 1 a forced SQL error message or 2 oldvalue and newvalue database fields in task summaries, related to the itemsummary parameter in a details action...

CVE-2008-1164: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the modprojectid parameter in a projectdetail action...

CVE-2008-1163: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action...

CVE-2008-1165: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script or HTML via 1 a forced SQL error message or 2 oldvalue and newvalue database fields in task summaries, related to the itemsummary parameter in a details action...

CVE-2008-1137: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Garys Cookbook comgaryscookbook 1.1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

CVE-2008-1128

CVE-2008-1128 involves a PHP remote file inclusion in the PHPMyTourney 2 package, specifically in tourney/index.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a crafted value in the page parameter, leading to remote code execution via a network-accessible end...

CVE-2008-1121

SQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the sessionvars cookie...

CVE-2008-1128: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2008-1122: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0...

CVE-2008-1121: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the sessionvars cookie...

Koobi CMS 4.3.0 - 4.2.3 &#40;categ&#41; Remote SQL Injection Vulnerability

JosS + Spanish Hackers Team + Sys - Project + Info: Software: Koobi CMS 4.3.0 - 4.2.3 HomePage: http://www.dream4.de/ Exploit: Remote SQL Injection High Where: index.php Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com +...

phpComasy 0.8 (mod_project_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= phpComasy 0.8 modprojectid Remote SQL Injection Vulnerability ================================================================= By email protectedKing phpComasy 0.8...

CVE-2008-0385

SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with 1 statprt/js/request or 2 dyn/js/request in the PATHINFO...