Webit Cms (XSS/HTML) Injection Vulnerabilities

Exploit for php platform in category web applications ============================================== Webit Cms XSS/HTML Injection Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Webit CMS - SQL Injection

------------------------------------------------------------------------------------------- Webit Cms SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Script Home: http://www.webitcms.gr Dork: powered by webit!...

Centreon 'main.php' SQL Injection Vulnerability

Centreon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

CVE-2010-1301: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

Faweb_2 Mullti Vulnerability

Exploit for php platform in category web applications ============================ Faweb2 Mullti Vulnerability ============================ ======================================================================================== | Title : Faweb2 Mullti Vulnerability | Author : indoushka | email :...

Unfixed XSS vulnerability at www.sacp.org.za

Security researcher wolfmankurd, has submitted on 03/08/2010 a cross-site-scripting XSS vulnerability affecting www.sacp.org.za, which at the time of submission ranked 2117431 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

CVE-2009-4672: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pg parameter...

SilverStripe debug_profile Parameter Information Disclosure

The SilverStripe CMS install hosted on the remote web server is affected by an information disclosure vulnerability because it fails to properly handle the 'debugprofile' parameter of the 'sapphire/main.php' script when running in live mode. An attacker, exploiting this flaw, can gain sensitive...

CVE-2009-4539: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...

TenderSystem 0.9.5 Beta Local File Inclusion

. . \ \ | | / | | / / || | | /\ \ / | |/ // \ / |/ \ \ \ | \ | | / \ | | \ | \ |\ /| || / / / / / / / / / ------------------------------------------------------------------------------------------- Note: TESTED LOCALLY WITH XAMPP FOR WINDOWS I was unable to get this to work on a...

Tender System 0.9.5b LFI

Exploit for unknown platform in category web applications ======================== Tender System 0.9.5b LFI ======================== . . \ \ | | / | | / / || | | /\ \ / | |/ // \ / |/ \ \ \ | \ | | / \ | | \ | \ |\ /| || / / / / / / / / /...

Tender System 0.9.5b - Local File Inclusion

. . \ \ | | / | | / / || | | /\ \ / | |/ // \ / |/ \ \ \ | \ | | / \ | | \ | \ |\ /| || / / / / / / / / / ------------------------------------------------------------------------------------------- Note: TESTED LOCALLY WITH XAMPP FOR WINDOWS I was unable to get this to work on a...

CVE-2009-3500: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to main.php and 2 gameid parameter to game.php...

CVE-2009-3367: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to 1 index.php and 2 main.php, and the 3 show parameter to main.php. NOTE: the provenance of this information is unknown; the details are...

Unfixed XSS vulnerability at www.mbon.org

Security researcher jath, has submitted on 17/09/2009 a cross-site-scripting XSS vulnerability affecting www.mbon.org, which at the time of submission ranked 556678 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is currently...

CVE-2009-3205

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewproduct action...

Sql injection

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewproduct action...

CVE-2009-3205

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewproduct action...

CVE-2009-3205

The CVE-2009-3205 entry concerns an SQL injection vulnerability in CBAuthority’s main.php, exploitable through the id parameter in a view_product action. The underlying flaw allows remote attackers to alter the SQL executed by the application, leading to potential arbitrary SQL execution with the...

CVE-2009-3205: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewproduct action...