175 matches found
AWBS <= 2.7.1 (news.php viewnews) Remote SQL Injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability AWBS Versions 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 news.php viewnews AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : AWBS Versions : 2.3.3 - v2.5.0 - v2.6...
[oss-security] CVE request: Proxmox VE < 3.2 user enumeration vulnerability
Hi list, We recently found a vulnerability affecting Proxmox VE 3.2 that allows an unauthenticated user to perform user enumeration. Vendor was contacted and the vulnerability fixed in Proxmox VE 3.2, released on 2014-03-10. References: Proxmox related commits:...
sensiGal 2.0 SQL Injection
Application Name : sensiGal v2.0 Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.galerie.edor.org/index.php?id=album&aid=193...
AutoWeb 0.9b SQL Injection
Application Name : AutoWeb 0.9b Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.savinodelbene.hr/news.php?id=2&lang=IT&theme=savino&news=1...
Global Travel SQL Injection
======================================================= Global Travel Promodetail.asp SQL Injection Vulnerability ======================================================= + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date :...
WebSuite SQL Injection
============================================================== WebSuite contentid SQL Injection Vulnerability ============================================================== Exploit Title: WebSuite contentid SQL Injection Vulnerability Date: september 21, 2010 Author: josalijoe Category? : Web App...
Joomla Trabalhe Conosco Cross Site Scripting
Joomla Component comtrabalheconosco Cross Site Scripting Vulnerabilities Author : Pyske Name : comtrabalheconosco Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri...
Joomla QPersonel Cross Site Scripting
Joomla Component comqpersonel Cross Site Scripting Vulnerabilities Author : Pyske Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,system-Hacker ,HeroTurK ,fireofdevil and ALL Cyber-Warrior Name : comqpersonel Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug F...
Joomla! Component com_trabalhe_conosco - Cross-Site Scripting
Joomla Component comtrabalheconosco Cross Site Scripting Vulnerabilities Author : Pyske Name : comtrabalheconosco Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri...
CVE-2009-3064
Directory traversal vulnerability in debugger/debugphp.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GETfilename parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in editor/edithtmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the highlighter parameter...
Directory traversal
Directory traversal vulnerability in debugger/debugphp.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GETfilename parameter...
CVE-2009-3065
CVE-2009-3065 describes a PHP remote file inclusion in Ve-EDIT 0.1.4, specifically in editor/edit_htmlarea.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the highlighter parameter. This is a server-side vulnerability that enables code execution with the privil...
CVE-2009-3064
Summary: CVE-2009-3064 concerns Ve-EDIT 0.1.4. The vulnerability is in the file debugger/debug_php.php , where a attacker can exploit a directory traversal via a .. in the _GET[filename] parameter. This can lead to local file inclusion and remote execution of arbitrary code, as described in the a...
CVE-2009-3064
Directory traversal vulnerability in debugger/debugphp.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GETfilename parameter...
CVE-2009-3065
PHP remote file inclusion vulnerability in editor/edithtmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the highlighter parameter...
Ve-EDIT 0.1.4 Remote File Inclusion
==================================================== | Ve-EDIT v 0.1.4 Remote File Include Vulne | My Home Page : WwW.Sec-Code.CoM | Founded By RoMaNcYxHaCkEr ==================================================== ! Discovered.: RoMaNcYxHaCkEr ! Vendor.....:...
Ve-EDIT 0.1.4 - highlighter Remote File Inclusion
Ve-EDIT 0.1.4 - highlighter Remote File Inclusion ==================================================== | Ve-EDIT v 0.1.4 Remote File Include Vulne | My Home Page : WwW.Sec-Code.CoM | Founded By RoMaNcYxHaCkEr ==================================================== ! Discovered.: RoMaNcYxHaCkEr !...
Ve-EDIT 0.1.4 (highlighter) Remote File Inclusion Vulnerability
No description provided by source. ==================================================== | Ve-EDIT v 0.1.4 Remote File Include Vulne | My Home Page : WwW.Sec-Code.CoM | Founded By RoMaNcYxHaCkEr ==================================================== ! Discovered.: RoMaNcYxHaCkEr ! Vendor.....:...
Ve-EDIT 0.1.4 Local File Inclusion
------------------------------------------------------------------------------------- Ve-EDIT v 0.1.4 debugphp.php LFI Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail: uykucuatwindowslivedotcom Script Download:...