Online Job Board - Authentication Bypass

'/ -.- --------------------oOO------OOo----------------------------- | Online Job Board Auth Bypass SQL Injection Vulnerability | | works only with magicquotesgpc = off | ---------------------------------------------------------------- ! Discovered: cr4wl3r ! Homepage: http://h4ckb0x.org/ !...

CVE-2010-1950

SQL injection vulnerability in the Online News Paper Manager comjnewspaper component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the dateinfo parameter to index.php. NOTE: the provenance of this information is unknown; the detail...

MigasCMS 1.0 SQL Injection

Title: MigasCMS 1.0 SQL Injection Download: http://www.sebrac.webcindario.com/cms/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: http://www.itsecteam.com/en/vulnerabilities/vulnerability54.htm Thanks:...

Unfixed XSS vulnerability at www.military-quotes.com

Security researcher Sony, has submitted on 05/07/2010 a cross-site-scripting XSS vulnerability affecting www.military-quotes.com, which at the time of submission ranked 108584 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Remote file inclusion

PHP remote file inclusion vulnerability in core/includes/gfwsmarty.php in Gallo 0.1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the configgfwroot parameter...

CVE-2010-1737

PHP remote file inclusion vulnerability in core/includes/gfwsmarty.php in Gallo 0.1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the configgfwroot parameter...

PT-2010-3056 · Xt:Commerce · Xt:Commerce

Name of the Vulnerable Software and Affected Versions: xt:Commerce affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the coID parameter in the Direct URL module, specifically in the bluegate seo.inc.php file, when magic quotes gpc...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 DefineRootToTool parameter to counter.php, 2 PathToRoot parameter to...

CVE-2010-1268

Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal sequences in the p parameter. NOTE: some of these details are obtained from third party information...

Joomla WISro Yahoo Quotes Local File Inclusion

============================================================================================================================ o Joomla Component WISro Yahoo Quotes Local File Inclusion Vulnerability Software : comwisroyq version 1.1.x commercial Vendor : http://www.wis.ro/ Author : NoGe Contact :...

Joomla! Component com_wisroyq 1.1 - Local File Inclusion

Joomla! Component comwisroyq 1.1 - Local File Inclusion ============================================================================================================================ o Joomla Component WISro Yahoo Quotes Local File Inclusion Vulnerability Software : comwisroyq version 1.1.x...

Joomla Component WISro Yahoo Quotes Local File Inclusion Vulnerability

Exploit for php platform in category web applications ====================================================================== Joomla Component WISro Yahoo Quotes Local File Inclusion Vulnerability ======================================================================...

CVE-2010-1217

Directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher states that the affected...

CVE-2010-1063

Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 codelib/cfg/common.inc.php, 2...

CVE-2010-1055

Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configforuminstalled parameter to 1 forum/adminLogin.php and 2 forum/userLogin.php...

Sql injection

SQL injection vulnerability in tt/index.php in TT Web Site Manager 0.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the ttname parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4722

SQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to 1 colorvoid/footer.php, 2 default-green/footer.php, 3...

CVE-2010-0967

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to 1 colorvoid/footer.php, 2 default-green/footer.php, 3...

CVE-2010-0958

CVE-2010-0958 describes a directory traversal vulnerability in Tribisur (versions 2.1, 2.0 and earlier) affecting the file modules/hayoo/index.php when magic_quotes_gpc is disabled. Attackers could use directory traversal sequences in the theme parameter to include and execute arbitrary files. Th...