CVE-2008-2225

CVE-2008-2225 describes an SQL injection in gameCMS Lite 1.0 . The vulnerability is triggered in the index.php file via the systemId parameter, allowing remote attackers to execute arbitrary SQL commands. The provided sources (NVD, CVE lists) confirm the affected component and the injection vecto...

gamecms-sql.txt

w w w || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

gameCMS Lite 1.0 (index.php systemId) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= gameCMS Lite 1.0 index.php systemId SQL Injection Vulnerability ================================================================= w w w || || | || o,7 || . o7 || 4||| ow, : ...

GameCMS Lite 1.0 - systemId SQL Injection

GameCMS Lite 1.0 - systemId SQL Injection w w w || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | |...

GameCMS Lite 1.0 - 'systemId' SQL Injection

w w w || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-...

gameCMS Lite 1.0 (index.php systemId) SQL Injection Vulnerability

No description provided by source. w w w || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ ...

Directory traversal

Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the style parameter...

CVE-2008-2076

The CVE-2008-2076 entry concerns ActualAnalyzer Lite 2.78 from ActualScripts. Affected component: admin.php; vulnerability type: Local File Inclusion via the style parameter. Root cause: inadequate sanitization allows a “..” path traversal to include arbitrary local PHP files, enabling remote att...

ActualAnalyzer Lite (free) 2.78 Local File Inclusion Vulnerability

No description provided by source. ActualAnalyzer Lite free 2.78 LOCAL FILE INCLUSION AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi -...

aal-lfi.txt

ActualAnalyzer Lite free 2.78 LOCAL FILE INCLUSION AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr Scrip...

ActualAnalyzer Lite (free) 2.78 - Local File Inclusion

ActualAnalyzer Lite free 2.78 LOCAL FILE INCLUSION AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr Scrip...

ActualAnalyzer Lite (free) 2.78 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== ActualAnalyzer Lite free 2.78 Local File Inclusion Vulnerability ================================================================== ActualAnalyzer Lite free 2.78 LOCAL FILE...

ActualAnalyzer Lite (free) 2.78 - Local File Inclusion

ActualAnalyzer Lite free 2.78 - Local File Inclusion ActualAnalyzer Lite free 2.78 LOCAL FILE INCLUSION AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani -...

CVE-2008-1730

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite aka gallery-script-lite or Free Photo Gallery Site Script, as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter...

Directory traversal

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite aka gallery-script-lite or Free Photo Gallery Site Script, as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter...

CVE-2008-1730

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite aka gallery-script-lite or Free Photo Gallery Site Script, as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter...

CVE-2008-1730

ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script) is affected by CVE-2008-1730 due to a directory traversal in download.html where the path parameter is not properly validated, allowing remote attackers to read arbitrary local files. The vulnerability is d...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...

CVE-2008-1323

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...

CVE-2008-1323

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...