HB CMS 1.7 SQL Injection

Securitylab.ir Application Info: Name: HB cms Version: 1.7 Website: http://www.hbcms.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: inurl:/hbcms/php/ magicquotesgpc ...

Directory traversal

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the sineconfigindexmain parameter...

CVE-2008-7156

EkinBoard 1.1.0 and earlier, when registerglobals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the groups parameter to 2, as demonstrated via backup.php...

CVE-2008-7156

CVE-2008-7156 affects EkinBoard 1.1.0 and earlier. The vulnerability arises when register_globals is enabled and allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, demonstrated via backup.php. The NVD entry assigns a base sco...

PixelPost 1.7.1 SQL Injection / XSS

=========================================== PixelPost Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com...

Wordpress Plugin WP-Syntax <= 0.9.1 Remote Command Execution

No description provided by source. ====================================================================== Wordpress plugin WP-Syntax = 0.9.1 Remote Code Execution ====================================================================== This vulnerability was originally discovered by Raz0r on...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

CVE-2008-7073

CVE-2008-7073 concerns a PHP remote file inclusion in the RSS module 0.1 for Pie Web Maesher. The root cause is that when register_globals is enabled, the lib parameter can be controlled to point to a URL, allowing an attacker to execute arbitrary PHP code on the server. The vulnerability targets...

CVE-2008-7073

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

GLSA-200908-09 : DokuWiki: Local file inclusion

The remote host is affected by the vulnerability described in GLSA-200908-09 DokuWiki: Local file inclusion girex reported that data from the 'configcascade' parameter in inc/init.php is not properly sanitized before being used. Impact : A remote attacker could exploit this vulnerability to execu...

Code injection

WP-Syntax plugin 0.9.1 and earlier for Wordpress, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via the testfilterwphead array parameter to test/index.php, which is used in a call to the calluserfuncarray function...

CVE-2009-2852

WP-Syntax plugin 0.9.1 and earlier for Wordpress, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via the testfilterwphead array parameter to test/index.php, which is used in a call to the calluserfuncarray function...

DokuWiki: Local file inclusion

Background DokuWiki is a standards compliant Wiki system written in PHP. Description girex reported that data from the "configcascade" parameter in inc/init.php is not properly sanitized before being used. Impact A remote attacker could exploit this vulnerability to execute PHP code from arbitrar...

CVE-2009-2787

CVE-2009-2787 is a directory traversal vulnerability in the Reputation plugin for PunBB (versions 2.2.4, 2.2.3, 2.0.4 and earlier). The issue arises when register_globals is enabled and magic_quotes_gpc is disabled, allowing remote attackers to include and execute arbitrary local files via a .. i...

CVE-2009-2769

CVE-2009-2769 is a PHP remote file inclusion vulnerability in Ultrize TimeSheet 1.2.2. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the config[include_dir] parameter within include/timesheet.php. The issue arises from improper handling...

Wordpress Plugin WP-Syntax <= 0.9.1 Remote Command Execution PoC

No description provided by source. ============================================================ Wordpress Plugin WP-Syntax = 0.9.1 Remote Command Execution ============================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /...

CVE-2008-6884

CVE-2008-6884 describes multiple directory traversal vulnerabilities in XOOPS 2.3.1 where remote attackers can cause local file inclusion/execution by manipulating the xoopsConfig[language] parameter. The issue affects blocks.php and main.php inside xoops_lib/modules/protector/ and is tied to reg...

PunBB Reputation.php Mod <= 2.0.4 Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl 0-Day PunBB Reputation.php Mod = v2.0.4 Local File Inclusion Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew registerglobals = On magicquotesgpc = On use LWP::UserAgent; use HTTP::Cookies; use strict; my $EtcPassw...

dit.cms 1.3 - pathsitemaprelPath Local File Inclusion

dit.cms 1.3 - pathsitemaprelPath Local File Inclusion + dit.cms 1.3 path/sitemap/relPath Local File Inclusion Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://ditcms.org/ + Local File Inclusion - Note : registerglobals = on - Vulnerable co...

dit.cms 1.3 (path/sitemap/relPath) Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= dit.cms 1.3 path/sitemap/relPath Local File Inclusion Vulnerabilities ======================================================================= + dit.cms 1.3...