CVE-2010-2438

SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php...

CVE-2010-2438: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php...

CVE-2010-2006

Directory traversal vulnerability in op/op.Login.php in LetoDMS formerly MyDMS 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2010-2006

Directory traversal vulnerability in op/op.Login.php in LetoDMS formerly MyDMS 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the lang parameter...

724CMS Enterprise Version 4.59 (section.php) LFI Vulnerability

Exploit for php platform in category web applications ============================================================== 724CMS Enterprise Version 4.59 section.php LFI Vulnerability ==============================================================...

CVE-2010-1724: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 func parameter to index.php, or the 2 lang parameter to index.php, which is not properly handled by ZLanguage.php...

DewNewPHPLinks 2.1.0.1 - Local File Inclusion

local file include Author: ItSecTeam download from:http://www.dew-code.com/components/comjooget/file/dew-newphplinks.v.2.1.0.1b.sef.zip script:DewNewPHPLinks 2.1.0.1 lfi vul1:/path/docs/add-cats.php $lang=$GET'lang'; if$lang!='' include "../include/lang/$lang.php"; ----------...

mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== mcGuestbook 1.2 lang Remote File Inclusion Vulnerability ========================================================== mcGuestbook 1.2 lang Remote File Inclusion Vulnerability Found :...

Chaton <= 1.5.2 Local File Include Vulnerability

================================================ Chaton = 1.5.2 Local File Include Vulnerability ================================================ + Chaton = 1.5.2 Local File Include Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to 1 en.inc.php, 2 hu.inc.php, 3 no.inc.php, 4 ro.inc.php, and 5 ru.inc.php in language/...

CVE-2009-4693

Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to 1 en.inc.php, 2 hu.inc.php, 3 no.inc.php, 4 ro.inc.php, and 5 ru.inc.php in language/...

CVE-2009-4693

Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to 1 en.inc.php, 2 hu.inc.php, 3 no.inc.php, 4 ro.inc.php, and 5 ru.inc.php in language/...

CVE-2009-4693

GraFX MiniCWB 2.3.0 is affected by multiple PHP remote file inclusion vulnerabilities that allow remote code execution via a URL in the LANG parameter targeting language/en.inc.php, language/hu.inc.php, language/no.inc.php, language/ro.inc.php, and language/ru.inc.php. The root cause is unsafe in...

CVE-2009-4693: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to 1 en.inc.php, 2 hu.inc.php, 3 no.inc.php, 4 ro.inc.php, and 5 ru.inc.php in language/...

Chaton 1.5.2 Local File Inclusion

Chaton Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm cr4wl3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 +...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2010-0700: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2009-4645: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in webclientuserguide.html in Accellion Secure File Transfer Appliance before 80105 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

phpNagios 'conf[lang]' Parameter LFI Vulnerability

phpNagios is prone to a local file include LFI vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4626

Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the conflang parameter...