PT-2015-7541

Name of the Vulnerable Software and Affected Versions Web Reference Database aka refbase versions prior to 0.9.7 Description The issue allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter in the "install.php" file. Recommendations For versions prior to...

refbase 0.9.6 - Multiple Vulnerabilities

Exploit Title: Refbase 5 /rss.php?where='nonexistent'+union+allselect+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,concat'version:',@@version,'',34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50-- - /rss.php?where='nonexistent'+union+allselec...

SS-2015-016: XSS in install.php

More info at https://www.silverstripe.org/software/download/security-releases/ss-2015-016/...

CVE-2015-5063

Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter to install.php...

CVE-2015-5063

Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter to install.php...

CVE-2015-5063

Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter to install.php...

PT-2015-6761

Name of the Vulnerable Software and Affected Versions SilverStripe CMS & Framework version 3.1.13 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the admin username or admin...

CVE-2015-5063: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter to install.php...

Hive 2.0 RC2 XSS / Code Execution / SQL Injection

| Title : Hive v2.0 RC2 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : "Powered by DigitalHive" | Tested on: windows 8.1 Français V.Pro | Bug : Stop Script | Download : http:///www.digitalhive.com ======================================= Stop SCript working :...

PHPB2B某处漏洞直接查看mysql密码

简要描述： PHPB2B某处漏洞直接查看mysql密码 详细说明： PHPB2B某处漏洞直接查看mysql密码 官网下载的最新版 install/install.php 安装文件，查看下代码。 ?php / PHPB2B Copyright C 2007-2099, Ualink Inc. All Rights Reserved. The contents of this file are subject to the License; you may not use this file except in compliance with the License. @version...

CVE-2014-9574

Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a .. dot dot in the installlang parameter...

CVE-2014-9574

CVE-2014-9574 affects FluxBB

CVE-2014-9574: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a .. dot dot in the installlang parameter...

PT-2015-4284

Name of the Vulnerable Software and Affected Versions FluxBB versions prior to 1.5.8 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the install lang parameter in the install.php file. Recommendations For versions prior to 1.5.8, upda...

FluxBB Native PHP File Inclusion Vulnerability

FluxBB is a PHP-based forum program. FluxBB suffers from a local PHP file inclusion vulnerability. A remote attacker can execute arbitrary "install.php" from a file in any directory using a directory traversal server e.g. ". /" sequence to execute an arbitrary "install.php"...

CVE-2014-9571

Cross-site scripting XSS vulnerability in admin/install.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/install.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter...

CVE-2014-9571

Cross-site scripting XSS vulnerability in admin/install.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter...

CVE-2014-9571

Cross-site scripting XSS vulnerability in admin/install.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter...

CVE-2014-9572

MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 does not properly restrict access to //install.php, which allows remote attackers to obtain database credentials via the install parameter with the value 4...