98 matches found
CVE-2011-3264: Exposure of Sensitive Information to an Unauthorized Actor
Zabbix before 1.8.6 allows remote attackers to obtain sensitive information via an invalid srcfld2 parameter to popup.php, which reveals the installation path in an error message...
E-Pay RFI Vulnerability
No description provided by source. ======================================================================================== | Title : E-Pay RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...
35mm Slide Gallery Cross Site Scripting Vulnerability
No description provided by source. | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | | Script : powered by 35mm Slide Gallery http://www.andymack.com/freescripts/ | | Tested on: windows SP2 Français V.Pnx2 2.0...
CVE-2009-4056: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the popup parameter...
Betsy CMS versions 3.5 - Local File Inclusion
Betsy CMS versions 3.5 - Local File Inclusion / Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...
Betsy CMS versions <= 3.5 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ Betsy CMS versions = 3.5 Local File Inclusion Vulnerability ============================================================ / Author : MizoZ from MA Group : EvilWay Good luck DZ : /...
Betsy CMS versions 3.5 - Local File Inclusion
/ Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...
Betsy CMS versions <= 3.5 Local File Inclusion Vulnerability
No description provided by source. / Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...
Betsy CMS 3.5 Local File Inclusion
/ Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...
CVE-2008-1273
CVE-2008-1273 concerns multiple XSS vulnerabilities in imageVue 1.7. The affected functionality is in the upload directory, with vulnerable entry points at popup.php, test/dir2.php, admin/upload.php, and dirxml.php. The underlying issue is that the path parameter is not properly sanitized, enabli...
CVE-2008-1273: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to 1 popup.php, 2 test/dir2.php, 3 admin/upload.php, and 4 dirxml.php in upload/. NOTE: the provenance of this information is unknown; the details...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...
CVE-2008-0877: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...
Sql injection
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...
CVE-2008-0845
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...
CVE-2008-0845
The CVE-2008-0845 entry concerns the WordPress WP-People plugin (version 1.6.1) vulnerability in wp-people-popup.php where the person parameter enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. The underlying issue is improper handling of user input in the wp-peo...
CVE-2008-0845: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...
CVE-2006-4743: Undefined Security Weakness
WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for 1 404.php, 2 akismet.php, 3 archive.php, 4 archives.php, 5 attachment.php, 6 blogger.php, 7 comments.php, 8 comments-popup.php, 9 dotclear.php, 10 footer.php, 11 functions.php, 12...
CVE-2006-3624: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the url parameter to 1 player.php or 2 popup.php...
CVE-2006-3036
Multiple cross-site scripting XSS vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 imgdir parameter in a index.php, and the 2 w, 3 h, and 4 t parameters in b popup.php...