Xforum 1.4 - topic SQL Injection

Xforum 1.4 - topic SQL Injection !/usr/bin/perl Xforum 1.4 Remote SQL Injection desc: Un forum php/MySQL, avec gestion complete des membres et des messages download: http://www.comscripts.com/scripts/php.xforum.1188.html d0rk: "xforum 1.4" bug found by j0j0 c0ded by j0j0 liretopic.php 68. $conn =...

Xforum 1.4 - 'topic' SQL Injection

!/usr/bin/perl Xforum 1.4 Remote SQL Injection desc: Un forum php/MySQL, avec gestion complete des membres et des messages download: http://www.comscripts.com/scripts/php.xforum.1188.html d0rk: "xforum 1.4" bug found by j0j0 c0ded by j0j0 liretopic.php 68. $conn = connect; 69. $requete = "SELECT...

exoops-sql.txt

E-xoops multiple variable/scripts SQL injection vendor url: http://www.e-xoops.com Advisore: http://lostmon.blogspot.com/2007/12/ e-xoops-multiple-variablescripts-sql.html vendor notify:NO exploits available: YES E-xoops is content-community management system written in PHP-MySQL. E-xoops contain...

bcoos-sql.txt

Bcoops adresses/ratefile.php lid variable SQL injection vendor url: http://www.bcoops.net Advisore: http://lostmon.blogspot.com/2007/11/ bcoops-adressesratefilephp-lid-variable.html vendor notify:NO exploits available: YES bcoos is content-community management system written in PHP-MySQL. bcoops...

bcoos-sqlxss.txt

Bcoops SQL injection and Cross-site scripting vendor url: http://www.bcoops.net Advisore: http://lostmon.blogspot.com/2007/11/ bcoops-sql-injection-and-cross-site.html vendor notify:YES exploits available: YES bcoos is content-community management system written in PHP-MySQL. bcoops contains a fl...

[SECURITY] Fedora 7 Update: cacti-0.8.7a-1.fc7

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

eggblog-xss.txt

H - Security Labs Eggblog v3.1.0 Security Advisory ID : HSEC20071111 General Information -------------------------- Name : EggBlog v.3.1.0 Vendor HomePage :http://sourceforge.net/projects/eggblog/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline...

cb075-rfi.txt

Content Builder 0.7.5 RFI Bug Script Home Page : http://www.content-builder.de/ Source Forge Script Link : http://sourceforge.net/projects/content-builder/ Script Download URL : http://www.content-builder.de/modules/download/download.php?id=821 The Content Builder is a powerful German...

actSite 1.56 (news.php) Local File Inclusion Vulnerability

No description provided by source. '/ -.- -----------------oOO------OOo----------------- | actSite v1.56 news.php Local File Inclusion | | coded by DNX | ------------------------------------------------- ! Discovered: DNX ! Vendor: http://www.actsite.de ! Detected: 02.09.2007 ! Reported:...

[waraxe-2007-SA#055] - Sql Injection in SiteX CMS 0.7.3 Beta

waraxe-2007-SA055 - Sql Injection in SiteX CMS 0.7.3 Beta ==================================================================== Author: Janek Vind "waraxe" Date: 27. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-55.html Target software description:...

wsportal-sql.txt

netVigilance Security Advisory 33 WSPortal version 1.0 SQL Injection Vulnerability Description: WSPortal is a site management system coded in PHP/MySQL. It is capable of adding pages, adding news to pages, adding images to news articles, alerting the site or a specific ip address, private messagi...

[Full-disclosure] WSPortal version 1.0 SQL Injection Vulnerability

netVigilance Security Advisory 33 WSPortal version 1.0 SQL Injection Vulnerability Description: WSPortal is a site management system coded in PHP/MySQL. It is capable of adding pages, adding news to pages, adding images to news articles, alerting the site or a specific ip address, private messagi...

[Full-disclosure] WSPortal version 1.0 Path Disclosure Vulnerability

netVigilance Security Advisory 32 WSPortal version 1.0 Path Disclosure Vulnerability Description: WSPortal is a site management system coded in PHP/MySQL. It is capable of adding pages, adding news to pages, adding images to news articles, alerting the site or a specific ip address, private...

Comicsense 0.2 - 'index.php?epi' SQL Injection (1)

Comicsense SQL Injection Advisory/Exploit by s0cratex [email protected] http://plexinium.net - ComicSense is a script using php / mySQL. It allows you to easily host an Online Comic or Image shack. You can download it from www.gayadesign.nl/comicsense/ - The bug is a common sql injection in...

myEvent version 1.6 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 24 myEvent version 1.6 Multiple Path Disclosure Vulnerabilities Description: myEvent is Dynamic Calendar based Events Management system with admin panel for adding events, edit and delete built using PHP & mySQL. Display today's event and future events links on the...

[Full-disclosure] Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities

netVigilance Security Advisory 28 Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from...

Aardvark Topsites PHP Directory Disclosure Vulnerability

Aardvark Topsites PHP Directory Disclosure Vulnerability Aardvark Topsites PHP is the premier free PHP/MySQL topsites script. An attacker can see what files are in the Directory. Knowing what is there to be executed can allow for more targeted and intelligent attacks against PHP Files known to be...

php security update

CentOS Errata and Security Advisory CESA-2007:0076 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

flashChat 4.7.8 Cross Site Scripting Vulnerability

/ Flashchat 4.7.8 / Date of written Advisory: February 04, 2007 Product: Flash Chat = 4.7.8 Vendor: http://tufat.com/ Description: flashChat is a highly customizable PHP/MySQL based chat room script that is easily integrated into a website and mimics IRC in it's command structure Exploits /...

timberwolf122-xss.txt

-=--------------------ADVISORY-------------------=- TimberWolf 1.2.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: TimberWolf -=+ Version: 1.2.2 -=+ Vendor's URL: http://cms.gamezrule.org/index.php -=+ Platform: Windows\Linux\Unix -=+ Bug...