Fantastic Blog CMS 1.0 SQL Injection

Exploit Title: Fantastic Blog CMS 1.0 - 'id' SQL Injection Dork: N/A Date: 2018-11-01 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/ronald-ronniem/ Software Link: https://www.sourcecodester.com/sites/default/files/download/Ronald%20Ronnie/fantasticblog0.zip...

NixCMS 1.0 - 'category_id' SQL Injection

Exploit Title: NixCMS 1.0 - 'categoryid' SQL Ýnjection Dork: N/A Date: 03.02.2018 Vendor: https://www.nixdesign.de Software Link: https://www.nixdesign.de/nix-cms/ Demo: http://www.jamaram.de/ Version: 1.0 Tested on: WiN10X64 Exploit Author: Bora Bozdogan Author WebSite : http://borabozdogan.net....

PT-2017-14716

Name of the Vulnerable Software and Affected Versions Techno Portfolio Management Panel version 1.0 Description The issue allows an attacker to inject SQL commands via a "single.php?id=" request. This could potentially lead to unauthorized access or manipulation of data. Recommendations For Techn...

CVE-2017-17110: Improper Neutralization of Special Elements used in an SQL Command

Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request...

CVE-2014-3962

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to 1 videocat.php or 2 single.php...

PT-2014-5638

Name of the Vulnerable Software and Affected Versions Videos Tube version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the url parameter to specific API endpoints, such as "videocat.php" or "single.php". Recommendations For version 1.0,...

CVE-2014-3962: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to 1 videocat.php or 2 single.php...

Sql injection

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

CVE-2012-5912: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

PT-2012-6193

Name of the Vulnerable Software and Affected Versions PicoPublisher version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to API endpoints such as "page.php" or "single.php". Recommendations For PicoPublisher version 2.0...

PicoPublisher v2.0 Remote SQL injection

Exploit for php platform in category web applications Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork :...

zbreaknews-sql.txt

z Name : z-breaknews 2.0 single.php Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, t0pP8uZz, 0in, suN8Hclf & All of my friends source of single.php : ... 4. @mysqlselectdb"$dbName"or die"Íĺ ěîăó âűáđŕňü áŕçó äŕííűő "; 5...

CVE-2008-3848: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

z-breaknews 2.0 - single.php SQL Injection

z-breaknews 2.0 - single.php SQL Injection z Name : z-breaknews 2.0 single.php Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, t0pP8uZz, 0in, suN8Hclf & All of my friends source of single.php : ... 4. @mysqlselectdb"$dbName"or die"Íĺ...

z-breaknews 2.0 (single.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== z-breaknews 2.0 single.php Remote SQL Injection Vulnerability =============================================================== Name : z-breaknews 2.0 single.php Remote SQL...

z-breaknews 2.0 - 'single.php' SQL Injection

z Name : z-breaknews 2.0 single.php Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, t0pP8uZz, 0in, suN8Hclf & All of my friends source of single.php : ... 4. @mysqlselectdb"$dbName"or die"Íĺ ěîăó âűáđŕňü áŕçó äŕííűő "...

Directory traversal

Multiple directory traversal vulnerabilities in iXon CMS 0.30 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the themeurl parameter to 1 index.php, 2 page.php, 3 search.php, 4 single.php, and 5 archives.php...

CVE-2007-2104

Multiple directory traversal vulnerabilities in iXon CMS 0.30 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the themeurl parameter to 1 index.php, 2 page.php, 3 search.php, 4 single.php, and 5 archives.php...

CVE-2007-2104

CVE-2007-2104 affects iXon CMS 0.30. The vulnerability is a directory traversal in the theme_url parameter that allows remote attackers to include and execute arbitrary local files via a .. traversal in (1) index.php, (2) page.php, (3) search.php, (4) single.php, and (5) archives.php. Impact is d...

CVE-2006-4743: Undefined Security Weakness

WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for 1 404.php, 2 akismet.php, 3 archive.php, 4 archives.php, 5 attachment.php, 6 blogger.php, 7 comments.php, 8 comments-popup.php, 9 dotclear.php, 10 footer.php, 11 functions.php, 12...