bcoos 1.0.13 - 'file' Local File Inclusion

source: https://www.securityfocus.com/bid/29275/info The 'bcoos' program is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to include local scripts in the context o...

Kalptaru Infotech Automated Link Exchange Portal - 'linking.page.php' SQL Injection

source: https://www.securityfocus.com/bid/29205/info Automated Link Exchange Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

IBD Micro CMS 3.5 - microcms-admin-login.php Multiple SQL Injections

IBD Micro CMS 3.5 - microcms-admin-login.php Multiple SQL Injections source: https://www.securityfocus.com/bid/29159/info IBD Micro CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

Fusebox 5.5.1 - fusebox5.php Remote File Inclusion

Fusebox 5.5.1 - fusebox5.php Remote File Inclusion source: https://www.securityfocus.com/bid/29163/info Fusebox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application a...

WordPress Plugin WP Photo Album - photo SQL Injection

WordPress Plugin WP Photo Album - photo SQL Injection source: https://www.securityfocus.com/bid/29148/info The WordPress WP Photo Album WPPA plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

WordPress Plugin WP Photo Album - 'photo' SQL Injection

source: https://www.securityfocus.com/bid/29148/info The WordPress WP Photo Album WPPA plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Forum Rank System 6 - 'settings['locale']' Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/29077/info Forum Rank System is prone to local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view files local scripts in the conte...

Maian Uploader 4.0 - header.php Cross-Site Scripting

Maian Uploader 4.0 - header.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29051/info Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitra...

BatmanPorTaL - 'uyeadmin.asp?id' SQL Injection

source: https://www.securityfocus.com/bid/29057/info BatmanPorTaL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or...

Call of Duty 4 1.5 - stats Denial of Service

Call of Duty 4 1.5 - stats Denial of Service source: https://www.securityfocus.com/bid/29026/info Call of Duty is prone to a denial-of-service vulnerability because the application fails to handle specially crafted commands. An attacker can exploit this issue to crash the affected application,...

LibTiff 3.x - Double-Free Memory Corruption

source: https://www.securityfocus.com/bid/17733/info Applications using the LibTIFF library are prone to a double-free vulnerability; a fix is available. Attackers may be able to exploit this issue to cause denial-of-service conditions in affected applications using a vulnerable version of the...

Siteman 2.x (EXEC/LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Siteman 2.x EXEC/LFI/XSS Multiple Remote Vulnerabilities ========================================================== Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE...

Clever Copy 3.0 (postview.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Clever Copy 'postview.php' SQL Injection Vulnerable Exploit Coded By U238 | Web - Designer Solutions Developer Thank you joss My Friends : ka0x - Marco Almeida - TheBekiR - fahn - Teyfik Cevik - Nettoxic - Caborz http://noexec.blogspot.com print...

Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion

Joomla! Component Visites 1.1 - MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/28942/info The Visites component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue m...

Siteman 2.x - Code Execution / Local File Inclusion / Cross-Site Scripting

Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE EXECUTION/LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr IRCRASH BUGTRA...

Eclipse 3.3.2 IDE - Help Server helpadvancedworkingSetManager.jsp?workingSet Cross-Site Scripting

Eclipse 3.3.2 IDE - Help Server helpadvancedworkingSetManager.jsp?workingSet Cross-Site Scripting source: https://www.securityfocus.com/bid/45921/info Eclipse IDE is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

Horde Webmail 1.0.6 - 'addevent.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28898/info Horde Webmail is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowin...

Advanced Electron Forum 1.0.6 - 'beg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28865/info Advanced Electron Forum AEF is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

TorrentFlux 2.3 - 'admin.php' Cross-Site Request Forgery (Add Admin)

source: https://www.securityfocus.com/bid/28846/info TorrentFlux is prone to a cross-site request-forgery vulnerability and a remote PHP code-execution vulnerability. Exploiting these issues may allow a remote attacker to create administrative accounts in the application or to execute arbitrary P...

μTorrent (uTorrent) WebUI 0.310 Beta 2 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/28847/info uTorrent WebUI is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions in the context of the affected application. uTorrent WebUI 0.310 beta 2 is vulnerable; other...