BalkanSys CMS show_pageID SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : BalkanSys CMS showpageID SQL injection Exploit Author : xBADGIRL21 Dork : inurl:/?act=showpage or inurl:/?act=showpage "Balkansys" Category: Webapps version: BalkanSys CMS 2.x - 3.x Tested on: Linux | Windows Vendore :...

constructr cms <= 3.02.5 stable Multiple Vulnerabilities

No description provided by source. Constructr CMS http://constructr-cms.org/ - = 3.02.5 Stable - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info:...

CVE-2008-5859

SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showpage parameter...

CVE-2008-5859: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showpage parameter...

CVE-2008-0207: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 prot, 2 host, 3 path, 4 name, 5 ext, 6 size, 7 searchdays, or 8 showpage parameter to the default URI...

CVE-2008-0199: Improper Input Validation

PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the showpage and time parameters to the default URI...