412 matches found
CVE-2009-3148
Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 calendar.php, 2 news.php, and 3 links.php; and the 4 assignmentid parameter to assignments.php...
Nullam Blog 0.1.2 LFI / XSS / SQL Injection
-- Salvatore Fresta aka drosophila CWNP444351 Salvatore "drosophila" Fresta + Application: Nullam Blog + Version: 0.1.2 + Website: http://nullam.net/ + Bugs: A Local File Inclusion B File Disclosure C Multiple Blind SQL Injection D SQL Injection E Reflected XSS + Exploitation: Remote + Date: 10 S...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to 1 news.php and 2 partneralle.php...
BandCMS 0.10 SQL Injection
\ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + BandCMS v0.10 news.php Milti SQL Injection Vulnerabilities + Vendor : http://rockband.sourceforge.net/ + Exploit : Affix + Dork : "Powered by Rock Band CMS 0.10" + Greetz : Mad-Hatter,...
Beex 3 Cross Site Scripting
/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Beex 3 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.aom-software.de/beexstart.php Greetings : Mizoz,...
BandCMS 0.10 news.php Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ BandCMS 0.10 news.php Multiple SQL Injection Vulnerabilities ============================================================ + BandCMS v0.10 news.php Milti SQL Injection...
BandCMS 0.10 news.php Multiple SQL Injection Vulnerabilities
No description provided by source. \ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + BandCMS v0.10 news.php Milti SQL Injection Vulnerabilities + Vendor : http://rockband.sourceforge.net/ + Exploit : Affix [email protected] + Dork :...
Rock Band CMS 0.10 - news.php Multiple SQL Injections (1)
Rock Band CMS 0.10 - news.php Multiple SQL Injections 1 \ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + BandCMS v0.10 news.php Milti SQL Injection Vulnerabilities + Vendor : http://rockband.sourceforge.net/ + Exploit : Affix + Dork :...
Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (1)
\ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + BandCMS v0.10 news.php Milti SQL Injection Vulnerabilities + Vendor : http://rockband.sourceforge.net/ + Exploit : Affix + Dork : "Powered by Rock Band CMS 0.10" + Greetz : Mad-Hatter,...
Sql injection
SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...
CVE-2008-7120
SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...
Unfixed XSS vulnerability at www.rdsm.fr
Security researcher DeAr EviL, has submitted on 07/11/2009 a cross-site-scripting XSS vulnerability affecting www.rdsm.fr, which at the time of submission ranked 27343135 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is current...
PHPWIND & DISCUZ! CSRF vulnerability-vulnerability warning-the black bar safety net
PHPWIND & DISCUZ! CSRF vulnerability affects versions: Discuz! 6.0.0 & 6.1.0 & 7.0.0 PHPWIND 6.0 & 6.3 & 7.0 Vulnerability description: PHPWIND & DISCUZ! The presence of CSRF vulnerabilities, triggering PHPWIND & DISCUZ! CSRF WORM! ... d/b31e4d2e6270c384 reference ... d/b31e4d2e6270c384 Safety...
CVE-2008-6425
CVE-2008-6425 concerns ComicShout 2.8, where the News.php news_id parameter is vulnerable to SQL injection. OpenVAS notes the issue arises because user data is not sufficiently sanitized before being used in SQL queries, enabling a remote attacker to manipulate or view data. Connected sources als...
CVE-2008-6425
SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the newsid parameter, a different vector than CVE-2008-2456...
Sql injection
SQL injection vulnerability in news.php in RSS Simple News RSSSN, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the pid parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...
Easyedit CMS - news.php?intPageID SQL Injection
Easyedit CMS - news.php?intPageID SQL Injection source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
phpx-sql.txt
action = $GET'action'; 12. $this-newsid = $GET'newsid'; 13. 14. global $userinfo; 15. global $core; 16. 17. $this-core = $core; 18. 19. $this-userinfo = $userinfo; 20. 21. 22. 23. 24. if !$this-userinfo DIE"HACK ATTEMPT"; 25. if $this-userinfonews != 1 DIE"NO ACCESS TO THIS MODULE"; 26. 27...