225 matches found
CVE-2010-4268: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Pulse Infotech Flip Wall comflipwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
Joomla! Component Pulse Infotech Flip Wall - SQL Injection
Joomla! Component Pulse Infotech Flip Wall - SQL Injection ========================================================= Joomla Component comflipwall SQL Injection Vulnerability ========================================================= Author : Fl0riX Bug Researchers Name : Joomla comflipwall Bug Typ...
Joomla! Component Pulse Infotech Flip Wall - SQL Injection
========================================================= Joomla Component comflipwall SQL Injection Vulnerability ========================================================= Author : Fl0riX Bug Researchers Name : Joomla comflipwall Bug Type : SQL injection Dork: "comflipwall" Infection : Admin Log...
Abhimanyu Infotech (show_news.php id) SQL Injection Exploit
Exploit for python platform in category web applications =========================================================== Abhimanyu Infotech shownews.php id SQL Injection Exploit =========================================================== !/usr/bin/env python -- coding:utf-8 -- '''...
Microsoft Windows itss.dll CHM File Handling Heap Corruption (CVE-2006-2297)
Microsoft Windows operating systems contain numerous libraries that facilitate the processing of the many file formats that are recognized by standard Windows installations. One such file format is the Microsoft compiled help files, known as CHM. A vulnerability exists in the Microsoft Windows...
CVE-2008-7075
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via 1 the subcatid parameter to article.list.php; or the artid parameter to 2 article.print.php, 3 article.comments.php, 4 article.publisher.php, or 5...
Unrestricted file upload
Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile photo, then accessing it via a direct request to the file in...
Sql injection
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via 1 the subcatid parameter to article.list.php; or the artid parameter to 2 article.print.php, 3 article.comments.php, 4 article.publisher.php, or 5...
CVE-2008-7076
CVE-2008-7076 describes an unrestricted file upload vulnerability in the Kalptaru Infotech Ltd. Star Articles 6.0 product, where an authenticated user can upload a file with an executable extension via profile photo upload (user.modify.profile.php) and access it in authorphoto/ to execute arbitra...
CVE-2008-7075
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via 1 the subcatid parameter to article.list.php; or the artid parameter to 2 article.print.php, 3 article.comments.php, 4 article.publisher.php, or 5...
CVE-2008-7075
CVE-2008-7075 affects Kalptaru Infotech Ltd. Star Articles 6.0. Multiple SQL injection vulnerabilities allow remote attackers to inject arbitrary SQL commands via (1) subcatid in article.list.php; (2) artid in article.print.php; (3) artid in article.comments.php; (4) artid in article.publisher.ph...
Persistent XSS in Kayako Support Suite
Comodo Group Vendor : Kayako Infotech Ltd. URL : http://www.kayako.com/ Version : Kayako SupportSuite 3.04.10 We've discovered a persistent XSS vulnerability in Kayako Support Suite Version 3.04.10. Although other similar XSS and SQL injection vectors such GET requests/URLs and other vulnerable...
CVE-2008-5590
SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forumtopicid parameter...
Sql injection
SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forumtopicid parameter...
CVE-2008-5590
SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forumtopicid parameter...
CVE-2008-5590
CVE-2008-5590 describes an SQL injection in the Kalptaru Infotech Product Sale Framework 0.1 beta, via the parameter forum_topic_id in customer.forumtopic.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. The provided documents identify the affected component and t...
CVE-2008-5590: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forumtopicid parameter...
CVE-2008-2865
SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a showarticle action...
Sql injection
SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a showarticle action...