Sql injection

SQL injection vulnerability in mods/hours/data/gethours.php in PHP Volunteer Management 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-6505

CVE-2012-6505 is an XSS vulnerability in PHP Volunteer Management 1.0.2, specifically in mods/hours/data/get_hours.php where the id parameter can be abused to inject arbitrary script/HTML. Affected component is the get_hours.php routine; root cause is improper handling/validation of the id input....

CVE-2012-6505: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mods/hours/data/gethours.php in PHP Volunteer Management 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2012-6504: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mods/hours/data/gethours.php in PHP Volunteer Management 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-3714

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php...

Design/Logic Flaw

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php...

CVE-2011-3714

CVE-2011-3714 affects ClanSphere 2010.0. The vulnerability allows remote attackers to obtain sensitive information through a direct request to a .php file (mods/board/attachment.php), causing an error message that reveals the installation path. The provided sources describe this path disclosure, ...

CVE-2011-3714: Exposure of Sensitive Information to an Unauthorized Actor

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php...

CVE-2008-7163: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the sineconfigindexmain parameter...

CVE-2008-6470

Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the 1 mods/messages/getusers.php and 2 mods/abcode/listimg.php files. NOTE: some of the...

CVE-2008-6470

Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the 1 mods/messages/getusers.php and 2 mods/abcode/listimg.php files. NOTE: some of the...

CVE-2008-6470: Undefined Security Weakness

Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the 1 mods/messages/getusers.php and 2 mods/abcode/listimg.php files. NOTE: some of the...

Simple Machines Forum - Destroyer 0.1

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Std; use LWP::Simple; use HTTP::Request; Author: Xianur0 Uxmal666atgmail.com Cracks links Password Recovery Find Temporary Files executed by mods DB function Flood by Error Log File Path Disclosure List installed Mo...

Simple Machines Forum - Destroyer 0.1

Exploit for unknown platform in category web applications ===================================== Simple Machines Forum - Destroyer 0.1 ===================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Std; use LWP::Simple; use HTTP::Request; Author: Xianur0 Uxmal666atgmail.com...

Simple Machines Forum (SMF) 1.0.13/1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass

!/usr/bin/perl use LWP::UserAgent; use Getopt::Std; use LWP::Simple; use HTTP::Request; Author: Xianur0 Uxmal666atgmail.com Cracks links Password Recovery Find Temporary Files executed by mods DB function Flood by Error Log File Path Disclosure List installed Mods Useful To Find Mods Vulnerable...

CVE-2008-3562

CVE-2008-3562 describes a directory traversal vulnerability in the Contact module of Chupix CMS 0.1.0 . When magic_quotes_gpc is disabled, remote attackers can cause arbitrary local file inclusion/execution by using a ".." path traversal via the mods parameter in index.php. The vulnerability’s im...

CVE-2007-5061

CVE-2007-5061 is a SQL injection in Clansphere 2007.4, specifically for the file mods/banners/navlist.php where the attacker can influence the cat_id parameter passed to index.php in a banners action. The underlying issue is an input-validated vulnerability that enables remote attackers to execut...

CVE-2007-5061: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php in a banners action...

Clansphere 2007.4 (cat_id) Remote SQL Injection Vulnerability

No description provided by source. Inclusion Hunter Team http://www.ihteam.net Clansphere 2007.4 Class: SQL Injection Found: 22/09/2007 Remote: Yes Site: http://www.clansphere.net/ Download: http://sourceforge.net/project/showfiles.php?groupid=95430 Author: R00TATI of IHTeam Contact:...

CVE-2007-2357

The CVE-2007-2357 entry describes a cross-site scripting (XSS) vulnerability in SineCMS 2.3.4, specifically in mods/Core/result.php, exploitable via the stringa parameter. Connected records (e.g., CVE-2007-6367) corroborate XSS in SineCMS 2.3.4 and earlier, via the guestbook fields, but the prima...