290 matches found
Remote file inclusion
PHP remote file inclusion vulnerability in admin/plugins/OnlineUsers/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSPTConfigdirdata parameter...
CVE-2008-7067: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in admin/plugins/OnlineUsers/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSPTConfigdirdata parameter...
Directory traversal
Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter to 1 blocks.php and 2 main.php in xoopslib/modules/protector/...
CVE-2008-6884: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter to 1 blocks.php and 2 main.php in xoopslib/modules/protector/...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to 1 main.php and possibly 2 demopage.php...
CVE-2009-2551
Multiple cross-site scripting XSS vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to 1 main.php and possibly 2 demopage.php...
CVE-2009-2551: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to 1 main.php and possibly 2 demopage.php...
CVE-2009-2360: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter...
WP-Lytebox 'pg' Parameter Local File Inclusion
The remote host is running WP-Lytebox, a plugin for WordPress that uses Lytebox to add a lightbox functionality to HTML content. The version of WP-Lytebox installed on the remote host fails to filter user-supplied input to the 'pg' parameter of the 'main.php' script before using it to include PHP...
CVE-2008-6112: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. dot dot in the id parameter in a detail action to 1 main.php and 2 template.php in ringtones/...
CVE-2008-6089: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a download action...
SolucionWeb (main.php?id_area) Remote SQL injection Vulnerability
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability SolucionWeb main.php?idarea AuTh0r : EhsanHp200 H0ME : www.only-4dl.tk Email : [email protected] Vendor : http://www.solucionweb.com/ Persian Gulf 4 Ever! Dork : "Powered by SolucionWeb" "inurl:main.php?idarea=" Exploit...
SolucionXpressPro - 'main.php' SQL Injection
source: https://www.securityfocus.com/bid/33111/info SolucionXpressPro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
ezringtone-disclose.txt
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Ez Ringtone Manager Multiple Vulnerabilities + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ APA Center of Yazd University...
Ez Ringtone Manager Multiple Remote File Disclosure Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== Ez Ringtone Manager Multiple Remote File Disclosure Vulnerabilities =================================================================== AUTHOR : b3hz4d Seyed Behzad...
CVE-2008-4772
SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter...
Sql injection
SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter...
CVE-2008-4772
CVE-2008-4772 describes an SQL injection vulnerability in QuestCMS, specifically in the file main/main.php where the parameter obj can be manipulated to execute arbitrary SQL commands by remote attackers. The NVD entry assigns a Base Score of 7.5 (High) with network access and no authentication r...