Joomla IXXO Cart SQL Injection

====================================== IXXO Cart for Joomla SQLi Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...

114啦网址导航建站系统 V1.13存在XSS、CSRF漏洞

114啦网址导航是目前国内使用率最高的网址导航之一，该网址导航生成系统为雨林木风自主研发，现正式开源宣传，将帮助更多站长轻松搭建网址导航网站。 url-submit/index.php对提交的数据未过滤直接插入数据库,造成了持久型XSS漏洞。 V1.13 厂商补丁： 114la ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.114la.com/ 在网站名称那一栏填写script...

Interuse Website Builder And Design SQL Injection

------------------------------------------------------------------------------------------- interuse Website Builder & design index2.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail:...

interuse Website Builder design - index2.php SQL Injection

interuse Website Builder design - index2.php SQL Injection ------------------------------------------------------------------------------------------- interuse Website Builder & design index2.php SQL Injection Vulnerability...

interuse Website Builder & design - 'index2.php' SQL Injection

------------------------------------------------------------------------------------------- interuse Website Builder & design index2.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail:...

LightNEasy 3.1.x File Upload / Disclosure / Local File Inclusion

Title: LightNEasy 3.1.x Multiple Vulnerabilites Vendor: http://lightneasy.org/ Dork: "Powered by LightNEasy" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability46.htm...

LightNEasy 3.1.x - Multiple Vulnerabilities

LightNEasy 3.1.x - Multiple Vulnerabilities Title: LightNEasy 3.1.x Multiple Vulnerabilites Vendor: http://lightneasy.org/ Dork: "Powered by LightNEasy" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

[InterN0T] LightNEasy 2.2.2 - HTML Injection Vulnerability

LightNEasy - HTML Injection Vulnerability Version Affected: 2.2.2 15th January 2009 newest Info: LightNEasy, a simple and light Content Management System and Website Builder Credits: InterN0T External Links: http://lightneasy.org/ -:: The Advisory ::- Vulnerable Input Fields: 1. Comment...

CVE-2007-1809

Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder CWB PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter to 1 clsheadlineprod.php, 2 clslistorders.php, or 3 clsviewpastorders.php in include/, different vectors than...

CVE-2007-1809

Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder CWB PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter to 1 clsheadlineprod.php, 2 clslistorders.php, or 3 clsviewpastorders.php in include/, different vectors than...

CVE-2007-1513

PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder CWB PRO 1.9.8, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder CWB PRO 1.9.8, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter...

CVE-2007-1513

CVE-2007-1513 describes a PHP remote file inclusion in GraFX Company WebSite Builder (CWB) PRO 1.9.8. When register_globals is enabled, an attacker can supply a URL in INCLUDE_PATH to comanda.php to execute arbitrary PHP code. The available documents do not specify a fixed patch/version or mitiga...

CVE-2007-1513

PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder CWB PRO 1.9.8, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter...

Echo Security Advisory 2007.76

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...

[ECHO_ADV_76$2007] Company WebSite Builder PRO (INCLUDE_PATH) Remote File Inclusion Vulnerability

ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability --------------------------------------------- ---------------------------------------------- Autho...

Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion...

Company WebSite Builder PRO 1.9.8 - 'INCLUDE_PATH' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...

Company WebSite Builder PRO 1.9.8 - INCLUDE_PATH Remote File Inclusion

Company WebSite Builder PRO 1.9.8 - INCLUDEPATH Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder...

[Full-disclosure] HYSA-2006-007 phpmyfamily 1.4.1 CRLF injection & XSS

------------------------------------------------------ HYSA-2006-007 h4cky0u.org Advisory 016 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== phpmyfamily v1.4.1 CRLF injection & XSS SEVERITY: ========= Medium SOFTWARE: ========= phpmyfamily v1.4.1...