96 matches found
CVE-2009-1033: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503...
CVE-2008-3965
SQL injection vulnerability in misc.php in MyBB aka MyBulletinBoard before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field...
Sql injection
SQL injection vulnerability in misc.php in MyBB aka MyBulletinBoard before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field...
CVE-2008-3965: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in misc.php in MyBB aka MyBulletinBoard before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field...
Sql injection
SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the pageoptions parameter to 1 options-general.php, 2 options-writing.php, 3 options-reading.php, 4 options-discussion.php, 5 options-privacy.php, 6...
burncms-rfi.txt
burnCMS = 0.2rootRemote File Include Vulnerablities D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:PathburnCMS/lib/authuser.php?root=Shell Exploit:PathburnCMS/lib/misc.php?root=Shell...
burnCMS <= 0.2 (root) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== burnCMS = 0.2 root Remote File Inclusion Vulnerabilities =========================================================== burnCMS = 0.2rootRemote File Include Vulnerablities D.Script:...
burnCMS 0.2 - 'root' Remote File Inclusion
burnCMS = 0.2rootRemote File Include Vulnerablities D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:PathburnCMS/lib/authuser.php?root=Shell Exploit:PathburnCMS/lib/misc.php?root=Shell...
CVE-2007-2235: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Referer HTTP header to misc.php or the 2 category name when deleting a category in admincategories.php...
CVE-2006-6801: Undefined Security Weakness
PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the newscfgpath parameter...
SH-News 0.93 - misc.php Remote File Inclusion
SH-News 0.93 - misc.php Remote File Inclusion !/usr/bin/perl SH-News 0.93 misc.php Remote File Include Exploit Download: http://www.scripthome.de/down.php?id=6 Vulnerable Code: require "$newscfg'path'/german.inc.php"; Coded by bd0rk || SOH-Crew Usage: shnews.pl target cmd shell shell variable...
CVE-2006-3795: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in DeluxeBB before 1.08 allow remote attackers to inject arbitrary web script or HTML via the 1 membercookie cookie in header.php and the 2 redirect parameter in misc.php...
CVE-2006-3516: Undefined Security Weakness
Multiple SQL injection vulnerabilities in FreeHost allow remote attackers to execute arbitrary SQL commands via 1 readme parameter to FreeHost/misc.php or 2 index parameter to FreeHost/news.php...
FreeHost "misc.php & news.php" SQL Injection
================================ Discovered By: CrAzY CrAcKeR ================================ Example:- /FreeHost/misc.php?readme=SQL /FreeHost/news.php?index=SQL Search:- Powered By FreeHost ================================ Email:[email protected]...
SaphpLesson-misc.txt
============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ============================================= Example:- /misc.php?action=SQL...
CVE-2006-3161
The CVE-2006-3161 entry concerns SaphpLesson 1.1 and earlier. The vulnerability is an SQL injection in misc.php, exploitable via the action parameter, allowing remote attackers to execute arbitrary SQL commands. CVSS 2.0 score is 7.5 (HIGH) with network attack vector and low complexity, no authen...
CVE-2006-3161: Undefined Security Weakness
SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the action parameter...
CVE-2006-2792: Undefined Security Weakness
SQL injection vulnerability in misc.php in Woltlab Burning Board WBB 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter...
WBB<--v2.3.4"misc.php" SQL injection Vulnerability
=================================== Discovery By: CrAzY CrAcKeR Site: www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-LoverHacker Breeeeh-LiNuXrOOt-BoNym-rootshill =================================== Example:- /misc.php?action=faq?sid=SQL injection...