985 matches found
Stack overflow
Stack-based buffer overflow in the GeneratePassword function in dsmtca aka the Trusted Communications Agent or TCA in the backup-archive client in IBM Tivoli Storage Manager TSM 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows...
CVE-2010-3314
Cross-site scripting XSS vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2010-3314
Cross-site scripting XSS vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2010-3314
Cross-site scripting XSS vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
Design/Logic Flaw
news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message...
Clicker CMS - Blind SQL Injection
Clicker CMS - Blind SQL Injection Exploit Title: Clicker CMS Blind SQL Injection Vulnerability Date: 2010-06-25 Author: [email protected] Software Link: n/a Version: n/a .:. Author : [email protected] .:. Contact: [email protected], [email protected] .:. Home : www.evilzone.org,...
CVE-2010-2438
SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php...
CVE-2010-2006
Directory traversal vulnerability in op/op.Login.php in LetoDMS formerly MyDMS 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the lang parameter...
CVE-2010-2006
Directory traversal vulnerability in op/op.Login.php in LetoDMS formerly MyDMS 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the lang parameter...
724CMS Enterprise Version 4.59 (section.php) LFI Vulnerability
Exploit for php platform in category web applications ============================================================== 724CMS Enterprise Version 4.59 section.php LFI Vulnerability ==============================================================...
DewNewPHPLinks 2.1.0.1 - Local File Inclusion
local file include Author: ItSecTeam download from:http://www.dew-code.com/components/comjooget/file/dew-newphplinks.v.2.1.0.1b.sef.zip script:DewNewPHPLinks 2.1.0.1 lfi vul1:/path/docs/add-cats.php $lang=$GET'lang'; if$lang!='' include "../include/lang/$lang.php"; ----------...
mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================== mcGuestbook 1.2 lang Remote File Inclusion Vulnerability ========================================================== mcGuestbook 1.2 lang Remote File Inclusion Vulnerability Found :...
Chaton <= 1.5.2 Local File Include Vulnerability
================================================ Chaton = 1.5.2 Local File Include Vulnerability ================================================ + Chaton = 1.5.2 Local File Include Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to 1 en.inc.php, 2 hu.inc.php, 3 no.inc.php, 4 ro.inc.php, and 5 ru.inc.php in language/...
CVE-2009-4693
Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to 1 en.inc.php, 2 hu.inc.php, 3 no.inc.php, 4 ro.inc.php, and 5 ru.inc.php in language/...
CVE-2009-4693
GraFX MiniCWB 2.3.0 is affected by multiple PHP remote file inclusion vulnerabilities that allow remote code execution via a URL in the LANG parameter targeting language/en.inc.php, language/hu.inc.php, language/no.inc.php, language/ro.inc.php, and language/ru.inc.php. The root cause is unsafe in...
CVE-2009-4693
Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to 1 en.inc.php, 2 hu.inc.php, 3 no.inc.php, 4 ro.inc.php, and 5 ru.inc.php in language/...
Chaton 1.5.2 Local File Inclusion
Chaton Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm cr4wl3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 +...