6803 matches found
CVE-2008-3265
SQL injection vulnerability in the DT Register comdtregister 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a payoptions action to index.php...
CVE-2008-3265
CVE-2008-3265 describes a SQL injection in the Joomla! DT Register component (com_dtregister) 2.2.3. The issue arises in the pay_options action to index.php, where the eventId parameter can be exploited by a remote attacker to execute arbitrary SQL commands. The vulnerability is caused by unsafe ...
Joomla Component DT Register Remote SQL injection Vulnerability
No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister eventId...
Joomla! Component DT Register - SQL Injection
Joomla! Component DT Register - SQL Injection /---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister...
pSys 0.7.0 Alpha Multiple Remote File Inclusion Vulnerability
No description provided by source. ==================================================== | pSys v0.7.0 Alpha Multiple Remote File Include | works only with registerglobals = on | Founded By rXh RoMaNTiC-TeaM ==================================================== ! Discovered.: RoMaNcYxHaCkEr !...
joomladtr-sql.txt
/---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister eventId Vendor :...
Pragyan CMS 2.6.2 (sourceFolder) Remote File Inclusion Vulnerability
No description provided by source. In The Name Of GOD ------------------------------------------------------------- - Persian Boys Hacking Team -:- 2008 - - discovered by N3TR00T3R at Y! dot com - pragyan 2.6.2 Remote File Includion - download...
Joomla Component com_dtregister SQL injection Vulnerability
Exploit for php platform in category web applications =============================================================== Joomla Component DT Register Remote SQL injection Vulnerability ===============================================================...
WinZIP MIME Parsing Overflow Proof of Concept Exploit
No description provided by source. / Author: snooq Date: 14 April 2004 This is a PoC exploit for WinZip32 MIME Parsing Overflow bug reported by iDefense on 27 February 2004. The original advisory is found here: http://www.idefense.com/application/poi/display?id=76 This version is SP dependent bec...
Joomla! Component DT Register - SQL Injection
/---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister eventId Vendor :...
Bilboblog 2.1 Multiple Remote Vulnerabilities
No description provided by source. ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...
bilboblog-multi.txt
------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link : http://www.tux-planet.fr/bilboblog-version-021-english-translation/ Vuln. types : Login Bypass -...
bilboblog 2.1 - Multiple Vulnerabilities
------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link : http://www.tux-planet.fr/bilboblog-version-021-english-translation/ Vuln. types : Login Bypass -...
bilboblog 2.1 - Multiple Vulnerabilities
bilboblog 2.1 - Multiple Vulnerabilities ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...
Fuzzylime CMS 3.01 - 'commrss.php' Remote Code Execution
Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.php file:...
Dedecms V5可执行文件上传漏洞
这是一个比较有意思的东西，但是成功利用起来并不容易，呵呵。 首先看configrglobals.php文件，摘的一段代码如下。这里作者本意是为了帮我们注册变量的，但是他却疏忽了我们不但能注册变量，还能覆盖一些变量。configrglobalsmagic.php也有同样的问题 ………………………………………………………………………… ifisarray$GET foreach$GET AS $key = $value $$key = $value; //可以覆盖任意变量 ………… …………………………………………………………………………...
phpnukeplatinum-exec.txt
Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...
1024 CMS多个文件包含漏洞
BUGTRAQ ID: 30091 1024是基于PHP和MySQL的内容管理系统。 1024 CMS中存在多个文件包含漏洞，允许恶意用户泄露敏感信息或入侵有漏洞的系统。 1...
DEBIAN-CVE-2008-2960
Cross-site scripting XSS vulnerability in phpMyAdmin before 2.11.7, when registerglobals is enabled and .htaccess support is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving scripts in libraries/...
Directory traversal
Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 thumbtemplate parameter to a admin/templates/templatethumbnail.php, and the 2...