Banana Dance Wiki CMS b2.x - Multiple Web Vulnerabilities

Document Title: =============== Banana Dance Wiki CMS b2.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1407 Release Date: ============= 2015-01-16 Vulnerability Laboratory ID VL-ID: ====================================...

IP. Board 3.4.5 SQL injection vulnerability in the use and analysis-vulnerability warning-the black bar safety net

I. background information First I want to introduce this web App of background information, as well as on the vulnerability of some of the basic overview: IPB Forum known as Invision Power Board（abbreviated IPB or IP. Board, is the world's most famous Forum app by PHP+MySQL architecture, 1. The X...

Free open source photo album Piwigo <= v2. 6. 0 SQL injection vulnerability 0day-a vulnerability warning-the black bar safety net

Piwigo is the world's most famous free open source photo album system by PHP+MySQL architecture. Since the framework build easy, by domestic and foreign developers favor recently, Piwigo = v2. 6. 0 burst critical 0day vulnerability. Vulnerability causes,Piwigo photo album system/piwigo/picture. p...

Oxwall 1.7.0 - Multiple Cross-Site Request Forgery HTML Injection Vulnerabilities

Oxwall 1.7.0 - Multiple Cross-Site Request Forgery HTML Injection Vulnerabilities Oxwall 1.7.0 Multiple CSRF And Stored XSS Vulnerabilities form action="http://192.168.0.105/admin/users/roles/" method="...

torrenttrader 2.08 - Multiple Vulnerabilities

No description provided by source. waraxe-2012-SA089 - Multiple Vulnerabilities in TorrentTrader 2.08 =============================================================================== Author: Janek Vind waraxe Date: 17. September 2012 Location: Estonia, Tartu Web:...

NovaBoard <= 1.0.1 (message) Persistent XSS Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NovaBoard = 1.0.1 / XSS Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: NovaBoard $ Version: = 1.0.1 $ File affected: index.php $ Download: http://www.novaboard.net/ Found by Pepelux pepeluxatenye-sec.org...

Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Claroline = 1.7.4 \scormExport.inc.php\ remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - works with registerglobals = On & allowurlfopen = On\r\n\r\n...

MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS = 2.0 admin/adminsettings.php Remote File Include Exploit...

iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + iWare Pro = 5.0.4 chatpanel.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- +...

bananadance wiki b2.2 - Multiple Vulnerabilities

No description provided by source. Title: ====== BananaDance Wiki b2.2 - Multiple Web Vulnerabilities Date: ===== 2012-11-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=745 VL-ID: ===== 745 Common Vulnerability Scoring System: ==================================== 7....

Agora-Project 2.12.11 Arbitrary File Upload Vulnerability

No description provided by source. Exploit Title: agora-project2.12.1112-2011 Remote Shell Upload Google Dork: n0 N0obs Date: 10/06/2012 Exploit Author: Misa3l Vendor Homepage: http://sourceforge.net/projects/agora-project/ Software Link:...

Joomla com_booklibrary - SQL Injection

No description provided by source. Exploit Title: SQL Injection in component combooklibrary for Joomla Date: 17.03.2011 Author: Marc Doudiet Software Link: http://ordasoft.com/Shop/OrdaSoft/BookLibrary/BookLibrary-search-Books-module-version-2.0/flypage.tpl.html Version: Version 2.0 for Joomla 1....

Squirrelcart PRO 3.0.0 - Blind SQL Injection Vulnerability

No description provided by source. Squirrelcart PRO 3.0.0 Blind SQL Injection Vulnerability Name Squirrelcart PRO Vendor http://www.squirrelcart.com Versions Affected 3.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date...

PHPcounter <= 1.3.2 (defs.php l) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl PHPcounter = 1.3.2 Local File Inclusion Vulnerability Script: A multi-account real time web-site...

EMO Realty Manager SQLi Vulnerable

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:EMO Realty Manager SQLi Vulnerable Published: 2010-06-08 Vendor url:http://emophp.com Price:249$ Platform: Unix, Linux , Windows Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members...

Relative Real Estate Systems <= 3.0 (listing_id) SQL Injection Vuln

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV99$2008 ----------------------------------------------------------------------------------------- ECHOADV99$2008 Relative Real Estate Systems = 3.0 listingid Sql Injection...

Banex PHP MySQL Banner Exchange 2.21 members.php cfg_root Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...

addalink <= 4 Write Approved Links Remote Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= addalink = 4 - beta / Write approved links without a previous moderation by the admin -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $...

UK One Media CMS (id) Error Based SQL Injection Vulnerability

No description provided by source. O / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ | | | | | UK One Media CMS id Error Based SQL Injection Vulnerability | | | | | | | | Summary: Conte...

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl observer = 0.3.2.1 Remote Command Execution Script: Observer is an autodiscovering PHP/MySQL/SNMP/CDP...