48 matches found
EUVD-2010-1371
Malware in sbrugna...
EUVD-2007-1232
Malware in sbrugna...
EUVD-2007-5122
Malware in sbrugna...
EUVD-2009-1841
Malware in sbrugna...
SiteX <= 0.7.4.418 (THEME_FOLDER) Local File Inclusion Vulnerabilities
No description provided by source. =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script:SiteX074build418.zip ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...
Sql injection
SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...
CVE-2010-1343
SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...
CVE-2010-1343
CVE-2010-1343 concerns a SQL injection in SiteX 0.7.4 beta, affecting the photo.php script via the albumid parameter. The underlying issue is unsanitized input incorporated into a database query, enabling remote attackers to manipulate queries and potentially access sensitive data. Public sources...
CVE-2010-1343
SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...
SiteX CMS 0.7.4 Beta SQL Injection
?php echo "\n\n\n"; echo " \n"; echo " Product: SiteX CMS 0.7.4 beta /photo.php SQL-Injection exploit \n"; echo " Usage: php.exe sitex.php www.site.com /cmspath/ \n"; echo " Require: Magicquotes = off \n"; echo " Author: Sc0rpi0n RUS http://scorpion.su \n"; echo " Special for Antichat...
SiteX photo.php albumid Parameter SQL Injection
The version of SiteX hosted on the remote web server fails to sanitize input to the 'albumid' parameter of the 'photo.php' script before using it in a database query. Provided PHP's 'magicquotesgpc' setting is disabled, an unauthenticated, remote attacker can leverage this issue to manipulate SQL...
SiteX CMS 0.7.4 beta (/photo.php) SQL-Injection exploit
No description provided by source. ?php echo "\n\n\n"; echo " \n"; echo " Product: SiteX CMS 0.7.4 beta /photo.php SQL-Injection exploit \n"; echo " Usage: php.exe sitex.php www.site.com /cmspath/ \n"; echo " Require: Magicquotes = off \n"; echo " Author: Sc0rpi0n RUS http://scorpion.su \n"; echo...
SiteX CMS 0.7.4 beta (photo.php) SQL-Injection exploit
Exploit for php platform in category web applications ====================================================== SiteX CMS 0.7.4 beta photo.php SQL-Injection exploit ====================================================== ?php echo "\n\n\n"; echo " \n"; echo " Product: SiteX CMS 0.7.4 beta /photo.php...
SiteX CMS 0.7.4 Beta - 'photo.php' SQL Injection
?php echo "\n\n\n"; echo " \n"; echo " Product: SiteX CMS 0.7.4 beta /photo.php SQL-Injection exploit \n"; echo " Usage: php.exe sitex.php www.site.com /cmspath/ \n"; echo " Require: Magicquotes = off \n"; echo " Author: Sc0rpi0n RUS http://scorpion.su \n"; echo " Special for Antichat...
SiteX CMS 0.7.4 Beta - photo.php SQL Injection
SiteX CMS 0.7.4 Beta - photo.php SQL Injection ?php echo "\n\n\n"; echo " \n"; echo " Product: SiteX CMS 0.7.4 beta /photo.php SQL-Injection exploit \n"; echo " Usage: php.exe sitex.php www.site.com /cmspath/ \n"; echo " Require: Magicquotes = off \n"; echo " Author: Sc0rpi0n RUS http://scorpion....
SiteX 'THEME_FOLDER' Parameter Multiple Local File Include Vulnerabilities
SiteX is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...
SiteX 'THEME_FOLDER' Parameter Multiple Local File Include Vulnerabilities
SiteX is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...
CVE-2009-1846
Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the THEMEFOLDER parameter to 1 Corporate/homepage.php, 2 Fusion/homepage.php, 3 Joombo/homepage.php, 4 Streamline/homepage.php,...
Directory traversal
Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the THEMEFOLDER parameter to 1 Corporate/homepage.php, 2 Fusion/homepage.php, 3 Joombo/homepage.php, 4 Streamline/homepage.php,...
CVE-2009-1846
CVE-2009-1846 affects SiteX (versions up to 0.7.4 Build 418) with multiple local file inclusion vulnerabilities via the THEME_FOLDER parameter in themes/, enabling an attacker to include/execute arbitrary local files (directories: Corporate, Fusion, Joombo, Streamline, Structure homepage.php). Th...