256 matches found
Portix-CMS 1.5.0. rc5 - Local File Inclusion
Portix-CMS 1.5.0. rc5 - Local File Inclusion -==================== in The Name Of aLLah ====================- Title: Portix-CMS 1.5.0. rc5 Local File Inclusion Google Dork: inurl:livriel.php?livriel= Date: n/a Author: Or4nG.M4n Link:...
Portix-CMS 1.5.0. rc5 - Local File Inclusion
-==================== in The Name Of aLLah ====================- Title: Portix-CMS 1.5.0. rc5 Local File Inclusion Google Dork: inurl:livriel.php?livriel= Date: n/a Author: Or4nG.M4n Link: http://www.easy-script.com/scripts-PHP/portix-cms-150-rc5-3005.html Version: v1.5.0. rc5 Tested on: windows ...
Joomla Team SQL Injection
Joomla Component comteam SQL Injection Vulnerability Author : CoBRa21 Dork : inurl:comteam Exploit http://localhost/PATH/print.php?task=person&id=36 and 1=1 http://localhost/PATH/print.php?task=person&id=36 and 1=2 http://localhost/PATH/print.php?task=person&id=36 SQL Ordu-yu Lojistik TIM // CoBR...
Joomla! Component com_team - SQL Injection
Joomla! Component comteam - SQL Injection Joomla Component comteam SQL Injection Vulnerability Author : CoBRa21 Dork : inurl:comteam Exploit http://localhost/PATH/print.php?task=person&id=36 and 1=1 http://localhost/PATH/print.php?task=person&id=36 and 1=2...
CVE-2010-2716: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 ndetail.php and 2 print.php...
PsNews 1.3 SQL Injection
Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor : http://www.psnews.sourceforge.net Version : 1.3 Tested on : Linux & Windows Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==- http://www.site.com/path/ndetail.php?id=SQL1...
Tainos Sosua-News SQL Injection
/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Tainos...
CVE-2010-0753: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SQL Reports comsqlreport component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter to ajax/print.php. NOTE: some of these details are obtained from third party information...
xoops 1.02 print.php Sql注入漏洞
No description provided by source...
Unfixed XSS vulnerability at www.scu.edu.au
Security researcher lljkrieg, has submitted on 24/07/2009 a cross-site-scripting XSS vulnerability affecting www.scu.edu.au, which at the time of submission ranked 75237 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is currentl...
CVE-2008-6129
CVE-2008-6129 affects moziloWiki 1.0.1 and earlier. A directory-traversal in print.php allows remote attackers to read arbitrary files by providing .. in the page parameter. The NVD entry lists a MEDIUM base score (4.3) with network attack vector and partial confidentiality impact, but exploitati...
CVE-2008-6129: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in print.php in moziloWiki 1.0.1 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...
CVE-2008-5968
Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...
CVE-2008-5968
CVE-2008-5968 affects PHP iCalendar 2.24 and earlier. It is a directory traversal vulnerability in print.php that allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter of a phpicalendar_* cookie. This is a different vector than CV...
Sql injection
SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5768
SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5768: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...
XOOPS Module Amevents (print.php id) SQL Injection Vulnerability
No description provided by source. XOOPS Module: Amevents AUTHOR : netRoot HOME : http://www.passw0rd.info MAİL : [email protected] DORKS : dork: /modules/amevents/print.php?id= target: scriptpage.com/modules/amevents/print.php?id=sql Code Sql code:...
Sql injection
SQL injection vulnerability in print.php in CustomCms CCMS Gaming Portal 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4156
CVE-2008-4156 affects the CustomCms (CCMS) Gaming Portal 4.0. The vulnerability is a SQL injection in print.php via the id parameter when magic_quotes_gpc is disabled. This creates a risk of arbitrary SQL execution by a remote attacker. The available documents do not provide specific affected ver...