Admbook PHP Code Injection Flaw

The remote web server contains a PHP script that allows arbitrary code injection. Description : The remote host is running AdmBook, a PHP-based guestbook. The remote version of this software is prone to remote PHP code injection due to a lack of sanitization of the HTTP header 'X-Forwarded-For'...

nept-upload.txt

//Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2. Select it for upload, and tamperdata t...

NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================ NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability ============================================================ //Title - NEPT Image Uploader shell upload //Vendor -...

CuteNews search.php Cross-Site Scripting Vulnerability

The remote web server contains a PHP script that is affected by a cross-site scripting issue. The version of Cutenews installed on the remote host fails to sanitize input to the SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are...

NEPT Image Uploader 1.0 - Arbitrary File Upload

//Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2. Select it for upload, and tamperdata t...

Etomite CMS id Parameter SQL Injection

The remote web server contains a PHP script that is affected by a SQL injection vulnerability. Description: The remote web server is running Etomite CMS, a PHP-based content management system. The version of Etomite CMS installed on the remote host fails to sanitize input to the...

Cutenews search.php Cross-Site Scripting Vulnerability

The remote web server contains a PHP script that is affected by a cross-site scripting issue. Description: The version of Cutenews installed on the remote host fails to sanitize input to the 'search.php' script before using it to generate dynamic HTML to be returned to the user. An unauthenticate...

Segue CMS themesdir Parameter Remote File Include Vulnerability

The remote web server contains a PHP script that is affected by a remote file include issue. Description: The remote web server is running Segue CMS, an open source content management system tailored for educational institutions. The version of Segue CMS installed on the remote host fails to...

Full PHP Emlak Script (arsaprint.php id) SQL Injection Vulnerability

No description provided by source. || | | Full PHP Emlak Script arsaprint.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

SQL Injection in EasyRealtorPRO 2008

Original article: http://www.davidsopas.com/2008/09/sql-injection-in-easyrealtorpro/ "EasyRealtorPRO 2008 provides you with all features you need to setup your own business oriented real estate website on your own domain name. Our support team will install the script on your server and then you c...

easyrealtor-sql.txt

Original article: http://www.davidsopas.com/2008/09/sql-injection-in-easyrealtorpro/ "EasyRealtorPRO 2008 provides you with all features you need to setup your own business oriented real estate website on your own domain name. Our support team will install the script on your server and then you c...

Gentoo Security Advisory GLSA 200507-15 (PHP)

The remote host is missing updates announced in advisory GLSA 200507-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200507-07 (phpwebsite)

The remote host is missing updates announced in advisory GLSA 200507-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200508-13 (pear-xml_rpc phpxmlrpc)

The remote host is missing updates announced in advisory GLSA 200508-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200507-02 (wordpress)

The remote host is missing updates announced in advisory GLSA 200507-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Sports Clubs Web Panel 0.0.1 Remote File Upload Vulnerability

No description provided by source. --==+============================================================================+==-- --==+ Sports Clubs Web Panel 0.0.1 Remote File upload +==-- --==+============================================================================+==-- Discovered By: Stack +...

Sports Clubs Web Panel 0.0.1 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================= Sports Clubs Web Panel 0.0.1 Remote File Upload Vulnerability =============================================================...

sportsclub-upload.txt

--==+============================================================================+==-- --==+ Sports Clubs Web Panel 0.0.1 Remote File upload +==-- --==+============================================================================+==-- Discovered By: Stack + Discovered On: 11 Sep 2008 + Download:...

Sports Clubs Web Panel 0.0.1 - Arbitrary File Upload

Sports Clubs Web Panel 0.0.1 - Arbitrary File Upload --==+============================================================================+==-- --==+ Sports Clubs Web Panel 0.0.1 Remote File upload +==-- --==+============================================================================+==-- Discovered...

EsFaq 2.0 - 'idcat' SQL Injection

|| | | EsFaq Remote Sql Injection Exploit | | |---------------------SuB-ZeRo----------------------| | | Author: SuB-ZeRo | | Home : www.dz-security.com | | email: [email protected] | | | | | | | script :http://editeurscripts.com/ressources/scripts-php/dl.php?idscript=5 | | DorK :...