71 matches found
Zabbix <= 1.8.4 (popup.php) SQL Injection
Exploit for php platform in category web applications Exploit Title: Zabbix = 1.8.4 SQL Injection Google Dork: "Zabbix 1.8.4 Copyright 2001-2010 by SIA Zabbix" Date: November 24th, 2011 Author: Marcio Almeida Software Link:...
Advanced Poll 2.02 SQL Injection
Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced Poll 2.02 + Category : Webapps + Severity : High +...
DEBIAN-CVE-2011-3264
Zabbix before 1.8.6 allows remote attackers to obtain sensitive information via an invalid srcfld2 parameter to popup.php, which reveals the installation path in an error message...
CVE-2011-3265
popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter...
CVE-2011-3264
Zabbix before 1.8.6 allows remote attackers to obtain sensitive information via an invalid srcfld2 parameter to popup.php, which reveals the installation path in an error message...
CVE-2011-3265
popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter...
CVE-2011-3264
CVE-2011-3264 affects Zabbix prior to 1.8.6, where an invalid srcfld2 parameter to popup.php can disclose the installation path via an error message. This vulnerability is documented across multiple sources (NVD, OSV, OpenVAS/Nessus entries) with the same description. The issue is an information ...
E-Pay RFI Vulnerability
No description provided by source. ======================================================================================== | Title : E-Pay RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...
35mm Slide Gallery Cross Site Scripting Vulnerability
No description provided by source. | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | | Script : powered by 35mm Slide Gallery http://www.andymack.com/freescripts/ | | Tested on: windows SP2 Français V.Pnx2 2.0...
Betsy CMS versions <= 3.5 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ Betsy CMS versions = 3.5 Local File Inclusion Vulnerability ============================================================ / Author : MizoZ from MA Group : EvilWay Good luck DZ : /...
Betsy CMS versions 3.5 - Local File Inclusion
Betsy CMS versions 3.5 - Local File Inclusion / Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...
Betsy CMS versions 3.5 - Local File Inclusion
/ Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...
Betsy CMS versions <= 3.5 Local File Inclusion Vulnerability
No description provided by source. / Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...
Betsy CMS 3.5 Local File Inclusion
/ Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...
CVE-2008-1273
CVE-2008-1273 concerns multiple XSS vulnerabilities in imageVue 1.7. The affected functionality is in the upload directory, with vulnerable entry points at popup.php, test/dir2.php, admin/upload.php, and dirxml.php. The underlying issue is that the path parameter is not properly sanitized, enabli...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...
Sql injection
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...
CVE-2008-0845
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...
CVE-2008-0845
The CVE-2008-0845 entry concerns the WordPress WP-People plugin (version 1.6.1) vulnerability in wp-people-popup.php where the person parameter enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. The underlying issue is improper handling of user input in the wp-peo...
CVE-2006-3036
Multiple cross-site scripting XSS vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 imgdir parameter in a index.php, and the 2 w, 3 h, and 4 t parameters in b popup.php...