300 matches found
CVE-2009-3911
TFTgallery 0.13 is vulnerable to a cross-site scripting (XSS) flaw in settings.php via the sample parameter, allowing remote injection of script/HTML. OpenVAS notes TFTgallery
CVE-2009-3911: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the sample parameter...
CVE-2008-6901: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 settings.php, 2 deleteuser.php, 3...
Information disclosure
WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message...
CVE-2009-2432
WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message...
DEBIAN-CVE-2009-2432
WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message...
CVE-2009-2432: Undefined Security Weakness
WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message...
WysGui CMS 1.2b (Insecure Cookie Handling) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
CVE-2008-6535: Undefined Security Weakness
admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter...
Q-News 2.0 - Remote Command Execution
Q-News 2.0 - Remote Command Execution Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Vulnerability = Remote Command Execution Software = q-news 2.0 Download = http://ovh.dl.sourceforge.net/sourceforge/php-box/2.0nologin.zip Greets to = Osirys for his friendship and his tips, Myral,...
Q-News 2.0 - Remote Command Execution
Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Vulnerability = Remote Command Execution Software = q-news 2.0 Download = http://ovh.dl.sourceforge.net/sourceforge/php-box/2.0nologin.zip Greets to = Osirys for his friendship and his tips, Myral, str0ke CODE " print "Cannot write to...
SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities
No description provided by source. 0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...
SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== SilverNews 2.04 Auth Bypass/LFI/RCE Multiple Vulnerabilities ============================================================== 0x01 Informations: Name : SilverNews 2.04 Download :...
Code injection
Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI...
2532|Gigs 1.2 Stable LFI / File Upload Vulnerabilities
START 0x01 Informations: Script : 2532|Gigs v1.2 Stable Download : http://www.hotscripts.com/jump.php?listingid=65863&jumptype=1 Dork : Powered by 2532|Gigs v1.2.2 Vulnerability : Local File Inclusion / Remote File Upload Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Not...
2532|Gigs 1.2.2 Stable Multiple Remote Vulnerabilities
No description provided by source. START 0x01 Informations: Script : 2532|Gigs v1.2 Stable Download : http://www.hotscripts.com/jump.php?listingid=65863&jumptype=1 Dork : Powered by 2532|Gigs v1.2.2 Vulnerability : Local File Inclusion / Remote File Upload Author : Osirys Contact :...
CVE-2008-5565: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters...
CVE-2008-5568: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...
Sql injection
Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby or 2 direction parameter to admin/users.php, or 3 configuration options to admin/settings.php...
CVE-2008-5434
Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby or 2 direction parameter to admin/users.php, or 3 configuration options to admin/settings.php...