CVE-2011-3748: Exposure of Sensitive Information to an Unauthorized Actor

Kamads Classifieds 2B3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by V2AXHTML/style/view.php and certain other files...

CVE-2011-3719: Exposure of Sensitive Information to an Unauthorized Actor

CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files...

CVE-2011-3710: Exposure of Sensitive Information to an Unauthorized Actor

bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files...

Ileys Web Control 2.0 SQL Injection

x Exploit Title: Powered by: Ileys Web Control 2.0 SQL Ýnjection Vulnerability view.php x Date: 25/07/2011 x Author: 3spi0n x HomePage: Http://Www.3spi0n.NET | Http://Twitter.Com/RigidusCO | CrypTR.ORG x E-Mail: 3spi0natgmaildotcom x Software Link: http://ileystechnology.com/ x Category: WebApps ...

Ileys Technology Inc. SQL Injection

x Exploit Title: Site Designed & Developed by: Ileys Technology Inc. SQL Injection Vulnerability view.php x Date: 25/07/2011 x Author: 3spi0n x HomePage: Http://Www.3spi0n.NET | Http://Twitter.Com/RigidusCO | CrypTR.ORG x E-Mail: 3spi0natgmaildotcom x Software Link: http://ileystechnology.com/ x...

PHP-AddressBook v6.2.12 (view.php) SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

PHP-AddressBook 6.2.12 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Traidnt UP 2.0 SQL Injection

|Title : Traidnt UP view.php SQL Injection Vulnerability | Software : Traidnt UP | Version : 2.0 | Date : 09 / 05 / 2011 | Author : ScOrPiOn | Contact : [email protected] | Google Dork : "Powered by Traidnt UP Version 2.0" | Vendor :...

Traidnt UP (view.php) SQL Injection Vulnerability

Exploit for php platform in category web applications |Title : Traidnt UP view.php SQL Injection Vulnerability | Software : Traidnt UP | Version : 2.0 | Date : 09 / 05 / 2011 | Author : ScOrPiOn | Contact : email protected | Google Dork : "Powered by Traidnt UP Version 2.0" | Exploit : |...

CVE-2010-3447: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file parameter in a viewfile action...

ADAN Neuronlabs - 'view.php' SQL Injection

-------------------------------------------------------- ADAN view.php Sql Injection Vulnerability -------------------------------------------------------- Date 04-03-2011 -------------------------------------------------------- Discovered By: IRAQJAGUAR Mail: [email protected]...

ADAN Neuronlabs - view.php SQL Injection

ADAN Neuronlabs - view.php SQL Injection -------------------------------------------------------- ADAN view.php Sql Injection Vulnerability -------------------------------------------------------- Date 04-03-2011 -------------------------------------------------------- Discovered By: IRAQJAGUAR...

ADAN Neuronlabs SQL Injection

-------------------------------------------------------- ADAN view.php Sql Injection Vulnerability -------------------------------------------------------- Date 04-03-2011 -------------------------------------------------------- Discovered By: IRAQJAGUAR Mail: [email protected]...

CVE-2010-2126: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Snipe Gallery 3.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the cfgadminpath parameter to 1 index.php, 2 view.php, 3 image.php, 4 search.php, 5 admin/index.php, 6 admin/gallery/index.php, 7 admin/gallery/view.php, 8...

CVE-2010-1617

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page...

CVE-2010-1615: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to 1 the addtolog function in mod/wiki/view.php in the wiki module, or 2 "data validation in some forms elements" related to...

CVE-2010-1617: Undefined Security Weakness

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page...

Sql injection

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...

CVE-2009-4805: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the storyid parameter to public/view.php or 2 the kill parameter to admin/remove.php...

CVE-2009-4807: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...