Telmanik CMS Press 1.01b (pages.php, page_name param) - SQL Injection

No description provided by source. x Type: SQL Injection x Vendor: www.telmanik.com x Script Name: Telmanik CMS Press x Script Version: 1.01b x Script DL: http://www.telmanik.com/download/TelmanikCMSPress/1.01beta/telmanikcmspressv1.01beta.zip x Author: Anarchy Angel x Mail : anarchyatdc414dotorg...

MyBB Plugin Custom Pages 1.0 - Remote SQL Injection Vulnerability

No description provided by source. MyBulletin Board MyBB Plugin Custom Pages 1.0 - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:pages.php + intext:powered by mybb Example:...

phpMyRealty <= 1.0.9 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. phpMyRealty = 1.0.9 pages.php id Remote SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: phpMyRealty Version: 1.0.7, 1.0.9 Download script: http://rapidshare.com/files/123835319/phpMyRealty.v1.0.7.PHP-rs.rar Vulnerability Class: SQL...

CVE-2014-0341

Multiple cross-site scripting XSS vulnerabilities in PivotX before 2.3.9 allow remote authenticated users to inject arbitrary web script or HTML via the title field to 1 templatesinternal/pages.tpl, 2 templatesinternal/home.tpl, or 3 templatesinternal/entries.tpl; 4 an event field to objects.php;...

CVE-2012-6621: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Email Address or 2 Custom Permalink Structure fields in admin/settings.php; 3 path parameter to admin/upload.php; 4 err paramet...

CVE-2012-4281: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to 1 holiday.php or 2 holidaybook.php, 3 id parameter to pages.php, 4 fid parameter to admin/airline-edit.php, or 5 cid parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

CVE-2011-3835

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

Art Dimension SQL Injection

Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...

Web development by Discover Web Solutions SQL injection Vulnerability

Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : Web development by Discover Web Solutions.. SQL injection Vulnerability + Date : 08 June 2011 + Author : k's0uR! + Category : WebApps + d0rk : "Web development by Discover Web...

CVE-2010-4611: Exposure of Sensitive Information to an Unauthorized Actor

Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to 1 pages.php and 2 menu.php in includes/corefiles and 3 extensions/login/frontend/pages/antihacker.php, which reveals the installation path in an error message...

CVE-2010-3025: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 excerpt parameter to application/modules/admin/controllers/posts.php, as reachable by admin/posts/edit; and the 2 conten...

Eurosito (pages.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Eurosito pages.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

CVE-2010-2623

CVE-2010-2623 documents an SQL injection in pages.php of Internet DM Specialist Bed and Breakfast. The flaw allows remote attackers to inject arbitrary SQL via the pp_id parameter, potentially compromising data confidentiality, integrity, and availability (per CVSS 2.0: AV:N/AC:L/Au:N/C:P/I:P/A:P...

CVE-2010-2623: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the ppid parameter...

Golf Club SQL Injection

Exploit Title: Golf Club SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url: http://www.internetdm.co.uk/site/pages.php?fid=0,1,362 Version: N/A Tested on: Windows CVE : EXPL0!T http://server/path/pages.php?fid=0,13&ppid=38SQL Greetz to : Alnjm33-virus-pal -g3n1ux -...

Golf Club CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= Golf Club CMS SQL Injection Vulnerability ========================================= Exploit Title: Golf Club SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url:...

CVE-2010-2339: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids parameter in an updatepages action...

K9 Kreativity Design - pages.php SQL Injection

K9 Kreativity Design - pages.php SQL Injection ========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By...

K9 Kreativity Design - 'pages.php' SQL Injection

========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-06-02 Pukul 21.00 WIB +...