932 matches found
CVE-2009-3355
Cross-site scripting XSS vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the sr parameter...
CVE-2009-3358
The CVE-2009-3358 entry corresponds to a SQL injection in profile.php of the Tourism Scripts Adult Portal escort listing, exploitable via the user_id parameter. Root cause is improper handling of user_id leading to arbitrary SQL execution by remote attackers. The vulnerability is classified with ...
CVE-2009-3355
CVE-2009-3355 is a cross-site scripting vulnerability in the Datetopia Buy Dating Site 1.0, specifically in profile.php. The issue arises from unsafely handling the s_r parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected software and component: Datetopia Buy Dati...
CVE-2009-3355: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the sr parameter...
CVE-2009-3358: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2009-3186: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the 1 t parameter to forum.php, 2 profilename parameter to profile.php, and 3 p parameter to view.php...
Adult Portal escort listing (user_id) Remote SQL Injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability profile.php userid Adult Portal escort listing http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...
Adult Portal escort listing (user_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================== Adult Portal escort listing userid Remote SQL Injection Vulnerability ======================================================================== Remote SQL Injection...
Adult Portal escort listing - 'user_id' SQL Injection
Viva IslaM Viva IslaM Remote SQL Injection Vulnerability profile.php userid Adult Portal escort listing http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...
OpenForum 'profile.php' Authentication Bypass Vulnerability
OpenForum is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VideoGirls BiZ Cross Site Scripting
/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || VideoGirls BiZ Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.videogirls.biz/ Greetings : Mizoz, Zuka,...
CVE-2008-7052
CVE-2008-7052 describes an unrestricted file upload flaw in profile.php of the Pre Projects Pre Real Estate Listings application. The vulnerability allows remote authenticated users to upload a file with an executable extension as a profile logo and later access it directly via the re_images/ pat...
CVE-2008-7052
Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in reimages/...
CVE-2008-7040: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...
CVE-2008-7052: Improper Input Validation
Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in reimages/...
WordPress Simple Forum Plugin - SQL Injection
Because of this vulnerability in ahah/sf-profile.php, the attackers can execute arbitrary SQL commands via the "u" parameter. Solution Update the plugin...
WebLeague 2.2.0 SQL Injection
DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT: profile.php?name='+UNION+SELECT+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+FROM+webladmin%23...
WebLeague 2.2.0 - profile.php SQL Injection
WebLeague 2.2.0 - profile.php SQL Injection DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT:...
WebLeague 2.2.0 (profile.php) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= WebLeague 2.2.0 profile.php SQL Injection Vulnerability ========================================================= DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection...
WebLeague 2.2.0 - 'profile.php' SQL Injection
DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT: profile.php?name='+UNION+SELECT+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+FROM+webladmin%23...