CVE-2008-2899: Undefined Security Weakness

Unspecified vulnerability in includes/classes/page.php in j00lean-CMS 1.03 has unknown impact and attack vectors...

CVE-2008-2459: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

EntertainmentScript 1.4.0 (page.php page) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl EntertainmentScript V1.4.0 page.php page Local File Inclusion Exploit Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & All muslims HaCkeRs : P0c :...

CVE-2008-1624

Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xPage parameter...

CVE-2008-1624: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xPage parameter...

JShop 1.x - 2.x (page.php xPage) Local File Inclusion Vulnerability

No description provided by source. JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra v0l4arrratgmaildotcom + + url: www.jshop.co.uk + ...

CVE-2008-0328: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

FaScript FaName 1.0 - SQL Injection

FaScript FaName 1.0 - SQL Injection FaScript FaName v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.hotscripts.com/Detailed/66472.html Injection Adress : http://Sitename/faname/page.php?id= Help : In This Script Admin Username and Password Save in...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Thierry Leriche Restaurant Management System ReMaSys 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the DIRROOT parameter to a global.php, or the 2 DIRPAGE parameter to b template/fr/page.php or c...

CVE-2007-4893

wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a does not properly verify the unfilteredhtml privilege, which allows remote attackers to conduct cross-site scripting XSS attacks via modified data to 1 post.php or 2 page.php with a nofilter field...

Cross site scripting

wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a does not properly verify the unfilteredhtml privilege, which allows remote attackers to conduct cross-site scripting XSS attacks via modified data to 1 post.php or 2 page.php with a nofilter field...

CVE-2007-4893

wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a does not properly verify the unfilteredhtml privilege, which allows remote attackers to conduct cross-site scripting XSS attacks via modified data to 1 post.php or 2 page.php with a nofilter field...

WordPress <= 2.2.3 - XSS

The attackers can conduct cross-site scripting XSS attacks via modified data to post.php or page.php with a nofilter field. Solution Update WordPress...

CVE-2007-4893: Cross-Site Request Forgery (CSRF)

wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a does not properly verify the unfilteredhtml privilege, which allows remote attackers to conduct cross-site scripting XSS attacks via modified data to 1 post.php or 2 page.php with a nofilter field...

CVE-2007-3980: Undefined Security Weakness

PHP remote file inclusion vulnerability in page.php in RCMS Pro RGameScript Pro allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

RGameScript Pro (page.php id) Remote File Inclusion Vulnerability

No description provided by source. /////\ Web Application: RCMS-Pro ///// Info: ///////////////////////////////////////////////////// Vulnerability: Remote File Inclusion Vendor: http://www.rcms-pro.com/ Dork: "Powered by RGameScript" Found By: Warpboy E-Mail/MSNM: [email protected]...

RGameScript Pro - 'page.php?id' Remote File Inclusion

/////\ Web Application: RCMS-Pro ///// Info: ///////////////////////////////////////////////////// Vulnerability: Remote File Inclusion Vendor: http://www.rcms-pro.com/ Dork: "Powered by RGameScript" Found By: Warpboy E-Mail/MSNM: [email protected] Website: http://private-node.net Shouts:...

Sql injection

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to news.php or 2 the name parameter to page.php...

CVE-2007-3811: Undefined Security Weakness

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to news.php or 2 the name parameter to page.php...

igshop14-eval.txt

!/usr/bin/perl -w use LWP::UserAgent; iG Shop 1.4 eval Inclusion Vulnerability found by IFX nyubicrew Vulnerability on page.php if !$action $action = "make"; // here the function will be called. eval "page$action;"; die "Example: perl $0 http://www.planetgolfuk.co.uk/shop\n" unless @ARGV; $b =...