2210 matches found
Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (3)
!/usr/bin/perl use LWP::UserAgent; use HTTP::Response; $| = 1; print " Woltlab Burning Board 2.3.6 Bug by trew \n"; if$ARGV Exploiting...\n"; my $url = shift; my $id = shift; my $sstring = shift; my $ua = LWP::UserAgent-new; my $request = new HTTP::Request'POST', 'http://'.$url.'search.php';...
vulnerability script indexu all versions
vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1| in upgrade.php...
fcCMS10-xss.txt
Fix & Chips CMS v1.0 http://software.fixnchipsit.com/ Vulnerable files: staff.php delete-announce.php new-customer.php search.php client-results.php -------------------------------------------- staff.php XSS User input in the Announcement box isn't properly sanatized before being generated. A few...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in a delete-announce.php; the 2 Announcement form field in b staff.php; the 3 Client Name, 4 Business Name, 5 Street, 6 Address 2, 7...
CVE-2007-0146
Multiple cross-site scripting XSS vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in a delete-announce.php; the 2 Announcement form field in b staff.php; the 3 Client Name, 4 Business Name, 5 Street, 6 Address 2, 7...
CVE-2007-0056: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to a ashop/catalogue.php and b ashop/basket.php, the 2 exp parameter to ashop/catalogue.php, the 3 searchstrin...
CVE-2006-4577
CVE-2006-4577 affects The Address Book 1.04e. It contains multiple cross-site scripting (XSS) vulnerabilities allowing an attacker to inject arbitrary scripts via: (1) email, (2) websites, (3) groupAddName in save.php; (4) errorMsg in index.php; (5) goTo and (6) search in search.php. CVSS v2 base...
CVE-2006-4577
Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...
CVE-2006-4575
Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the 1 lastname, 2 firstname, 3 passwordOld, 4 passwordNew, 5 id, 6 language, 7 defaultLetter, 8 newuserPass, 9 newuserType, 10 newuserEmail parameters in a user.php; the 1...
CVE-2006-4575: Undefined Security Weakness
Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the 1 lastname, 2 firstname, 3 passwordOld, 4 passwordNew, 5 id, 6 language, 7 defaultLetter, 8 newuserPass, 9 newuserType, 10 newuserEmail parameters in a user.php; the 1...
CVE-2006-4577: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...
CVE-2006-4577
Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...
CVE-2006-4575
Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the 1 lastname, 2 firstname, 3 passwordOld, 4 passwordNew, 5 id, 6 language, 7 defaultLetter, 8 newuserPass, 9 newuserType, 10 newuserEmail parameters in a user.php; the 1...
CVE-2006-6368: Undefined Security Weakness
PHP remote file inclusion vulnerability in login.php.inc in awrate 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to search.php...
awrate.com Message Board 1.0 - search.php Remote File Inclusion
awrate.com Message Board 1.0 - search.php Remote File Inclusion !/usr/bin/perl Portal Name : awrate 1.0search.php Remote File Inclusion Exploit BUG: http://target/Path/search.php?toroot=http Vulnerable Code: includeonce"$toroot../commonphp/table.php.inc";; Bug Found DeltahackingTEAM Code...
awrate.com Message Board 1.0 - 'search.php' Remote File Inclusion
!/usr/bin/perl Portal Name : awrate 1.0search.php Remote File Inclusion Exploit BUG: http://target/Path/search.php?toroot=http Vulnerable Code: includeonce"$toroot../commonphp/table.php.inc";; Bug Found DeltahackingTEAM Code :Dr.Trojan&Dr.Pantagon Download...
CVE-2006-5734: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 section parameter in a documentation/common/frametoc.php and b documentation/common/search.php, the 2 reqlang parameter in documentation/common/search.php a...
CVE-2006-5736: Undefined Security Weakness
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the resultlist array parameter, which is not initialized...
CVE-2006-5720: Undefined Security Weakness
SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and earlier allows remote attackers to execute arbitrary SQL commands via the forwhat parameter...