CVE-2010-2719

SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter...

LojaDoSite Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ LojaDoSite Blind SQL Injection Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

phpaaCms v0. 3. 1 SQL injection vulnerability-vulnerability warning-the black bar safety net

PHPAA show.php injection vulnerability Injection test http://server/phpaaCMS/show.php?id=-194 union all select 1,2,3,4,5,6,7,8,9,10,concatusername,0x3a,password,1 2,1 3,1 4,1 5 from cmsusers-- Affected versions: FooSun 5.0 Official address: http://www.phpaa.cn...

Xpen Group (show.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Xpen Group show.php Blind SQL Injection Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...

Sql injection

Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 show.php and 2 xml.php...

CVE-2009-4862

CVE-2009-4862 describes multiple SQL injection vulnerabilities in Alwasel 1.5. The affected functionality is the id parameter passed to two scripts, show.php and xml.php, which allows remote attackers to execute arbitrary SQL commands. The provided connected documents do not specify affected vers...

webCocoon's simpleCMS SQL Injection

webCocoon's simpleCMS Vulnerability Plugin Home: http://webcocoon.wordpress.com Author:ÝNFAZCI Site: www.1923turk.biz Exploit: Vuln file: /content/post/show.php Exploit: POST http://host/path/index.php HTTP/1.0 Content-type: application/x-www-form-urlencoded id=xek' union select...

webCocoons simpleCMS - SQL Injection

webCocoons simpleCMS - SQL Injection webCocoon's simpleCMS Vulnerability Plugin Home: http://webcocoon.wordpress.com Author:ÝNFAZCI Site: www.1923turk.biz Exploit: Vuln file: /content/post/show.php Exploit: POST http://host/path/index.php HTTP/1.0 Content-type: application/x-www-form-urlencoded...

Web Cocoon simpleCMS - 'show.php' SQL Injection

source: https://www.securityfocus.com/bid/41526/info Web Cocoon simpleCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

webCocoon's simpleCMS SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================= webCocoon's simpleCMS SQL Injection Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /...

webCocoon's simpleCMS SQL Injection Vulnerability

No description provided by source. webCocoon's simpleCMS Vulnerability Plugin Home: http://webcocoon.wordpress.com Author:ÝNFAZCI Site: www.1923turk.biz Exploit: Vuln file: /content/post/show.php Exploit: POST http://host/path/index.php HTTP/1.0 Content-type: application/x-www-form-urlencoded...

webCocoon's simpleCMS - SQL Injection

webCocoon's simpleCMS Vulnerability Plugin Home: http://webcocoon.wordpress.com Author:ÝNFAZCI Site: www.1923turk.biz Exploit: Vuln file: /content/post/show.php Exploit: POST http://host/path/index.php HTTP/1.0 Content-type: application/x-www-form-urlencoded id=xek' union select...

CVE-2009-2923

Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to show.php and 2 in parameter to advancedsearch.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

Sql injection

Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via the 1 adminName parameter to cp/auth.php, 2 cid parameter to artcat.php, and 3 catid parameter to show.php...

Alwasel 1.5 - Multiple SQL Injections

Alwasel 1.5 - Multiple SQL Injections ------------------Alwasel v1.5 Multiple Remote Vulnerabilities---------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Alwasel version : 1.5 Language: PHP Site:...

Alwasel 1.5 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ------------------Alwasel v1.5 Multiple Remote Vulnerabilities---------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Alwasel version : 1.5 Language: PHP Site:...

Mobilelib Gold v3 (Auth Bypass/SQL) Multiple Remote Vulnerabilities

No description provided by source. ------------------Mobilelib Gold v3 Auth Bypass/SQL Multiple Remote Vulnerabilities---------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Mobilelib Gold version : 3.0...

gencms 2006 - Multiple Vulnerabilities

gencms 2006 - Multiple Vulnerabilities GenCMS http://gencms.berlios.de/ eLwauxc2009 LFI /show.php ---------------------------------------------------------------------------------------------------- 18: $param = $GET'p'; 19: ifempty$param $param = 'news'; 20: //get right page 21: //$page =...

GenCMS Local File Inclusion

GenCMS http://gencms.berlios.de/ eLwauxc2009 LFI /show.php ---------------------------------------------------------------------------------------------------- 18: $param = $GET'p'; 19: ifempty$param $param = 'news'; 20: //get right page 21: //$page = $param.'.php'; 22: 23: //static or dynamic 24...