26 matches found
EUVD-2007-6552
Malware in sbrugna...
EUVD-2008-6755
Malware in sbrugna...
EUVD-2008-6260
Malware in sbrugna...
CVE-2008-6795
SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...
Sql injection
SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...
CVE-2008-6795
SQL injection in view_news.php of nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter. No versions or vulnerable modules are specified in the provided documents. Impact per CVSS shows partial confidentiality, integrity, and availability losses (...
CVE-2008-6795: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...
Directory traversal
Directory traversal vulnerability in includefile.php in nicLOR Sito, when registerglobals is enabled or magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary files via a .. dot dot in the pagefile parameter...
CVE-2008-6290
CVE-2008-6290 describes a directory traversal in includefile.php of nicLOR Sito. When register_globals is enabled or magic_quotes_gpc is disabled, remote attackers can cause local file inclusion via a ".." in the page_file parameter. The vulnerability can affect confidentiality, integrity, and av...
CVE-2008-6290: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in includefile.php in nicLOR Sito, when registerglobals is enabled or magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary files via a .. dot dot in the pagefile parameter...
nicLOR Sito includefile Local File Inclusion Vulnerabilities
No description provided by source. ------------------------------------------------------------ Sito includefile in PHP Local File Inclusion Vulnerabilities ------------------------------------------------------------ Discovered By StAkeRathotmaildotit Download On...
cmsschool-sql.txt
! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...
CMS-School 2005 - showarticle.php SQL Injection
CMS-School 2005 - showarticle.php SQL Injection ! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO...
nicLOR Sito - includefile Local File Inclusion
nicLOR Sito - includefile Local File Inclusion ------------------------------------------------------------ Sito includefile in PHP Local File Inclusion Vulnerabilities ------------------------------------------------------------ Discovered By StAkeRathotmaildotit Download On...
nicLOR Puglia Landscape (id) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =============================================================== nicLOR Puglia Landscape id Local File Inclusion Vulnerability =============================================================== /...
Vibro-CMS - Multiple SQL Injections
/ ------------------------------------------------------- Vibro-CMS Multiple Remote SQL Injection Vulnerabilities ------------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/Vibro-CMS...
CVE-2007-6586
SQL injection vulnerability in sezionenews.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a sezione page action to index.php...
Sql injection
SQL injection vulnerability in sezionenews.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a sezione page action to index.php...
CVE-2007-6586
CVE-2007-6586 is a SQL injection in nicLOR-CMS (sezione_news.php) that allows remote attackers to inject arbitrary SQL via the id parameter in a sezione page action to index.php. Affected: nicLOR-CMS, sezione_news.php; impact per sources is partial confidentiality/integrity/availability. Exploit ...