Sql injection

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6794

CVE-2008-6794 refers to a SQL injection vulnerability in the file directory.php of Scripts For Sites (SFS) EZ Pub Site. The vulnerability allows an attacker to execute arbitrary SQL commands through the cat parameter, enabling remote access to the database according to the NVD description. Relate...

CVE-2008-5936

front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter...

CVE-2008-5883

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

CVE-2008-5883

CVE-2008-5883 describes an absolute path traversal in mini-pub (front-end/dir.php) prior to version 0.3, where a full pathname supplied in the sDir parameter allows remote attackers to list arbitrary directories. Documents confirm the affected component and root cause; exploitation details are no...

Remote file inclusion

PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter...

CVE-2008-5579

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

Code injection

mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument...

Path traversal

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

CVE-2008-5581

The entry concerns CVE-2008-5581: a PHP remote file inclusion in mini-pub 0.3, specifically in mini-pub.php/front-end/img.php, exploitable via the sFileName parameter. Root cause is improper handling of user-supplied URLs, enabling remote PHP code execution. Public exploits exist (e.g., Exploit-D...

CVE-2008-5580

CVE-2008-5580 affects mini-pub 0.3 and its front-end code, specifically the file mini-pub.php/front-end/cat.php. The vulnerability arises from shell metacharacters in the sFileName argument, allowing remote attackers to execute arbitrary commands. The entry lists a high impact with network access...

CVE-2008-5579

The CVE-2008-5579 entry applies to mini-pub 0.3, affecting the file mini-pub.php/front-end/cat.php. The issue is an absolute path traversal vulnerability that allows remote attackers to read arbitrary files by supplying a full pathname in the sFileName parameter. This is a straightforward input-v...

CVE-2008-5580

mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument...

CVE-2008-5579

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

CMS Ortus 1.13 - SQL Injection

CMS Ortus 1.13 - SQL Injection Author: otmorozok428, http://forum.antichat.ru Products: CMS Ortus 1.12, CMS Ortus 1.13 Vendor: http://ortus.nirn.ru Download: http://ortus.nirn.ru/files/ortus1-12.zip, http://ortus.nirn.ru/files/ortus1-13.zip Dork for ALL Versions of CMS Ortus:...

sfsezpubsite-sql.txt

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : SQL Injection Script : SFS EZ Pub Site Greetz : Allah , Egyptian x hacker , Str0ke : Poc :...

SFS EZ Pub Site - SQL Injection

SFS EZ Pub Site - SQL Injection / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : SQL Injection Script : SFS EZ Pub Site Greetz : Allah , Egyptian x...

SFS EZ Pub Site (directory.php cat) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== SFS EZ Pub Site directory.php cat SQL Injection Vulnerability =============================================================== Discovered by : Hakxer Type Gap : SQL Injection...

SFS EZ Pub Site - SQL Injection

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : SQL Injection Script : SFS EZ Pub Site Greetz : Allah , Egyptian x hacker , Str0ke : Poc :...

mini-pub 0.3 Local Directory Traversal / File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== mini-pub 0.3 Local Directory Traversal / File Disclosure Vulnerabilities ======================================================================== mini-pub.php = v0.3...