CVE-2008-4073

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action...

CVE-2008-4074

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

CVE-2008-4073

CVE-2008-4073: A SQL injection vulnerability is present in Zanfi Autodealers CMS AutOnline, exploitable via the pageid parameter in a DBpAGE action. Affected component is index.php; the vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7....

Autodealers CMS AutOnline (pageid) SQL Injection Vulnerability

No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu...

Autodealers CMS AutOnline - pageid SQL Injection

Autodealers CMS AutOnline - pageid SQL Injection . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu ---QKrun1x-P47tr1ck - FeDeReR...

Zanfi CMS lite / Jaw Portal free (page) SQL Injection Vulnerability

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Zanfi CMS lite / Jaw Portal free SQL Injection Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + +...

Autodealers CMS AutOnline - 'pageid' SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...

Zanfi CMS lite / Jaw Portal free (fckeditor) Arbitrary File Upload Vuln

No description provided by source. S.W.A.T. Title: Zanfi CMS lite / Jaw Portal free fckeditor Remote Arbitrary File Upload Vendor: http://www.zanfi.nl/down.php?file=ZanfiCmsLite.rar Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable The Uploader In Config File ; Demo:...

autodealers-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...

zanficms-sql.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Zanfi CMS lite / Jaw Portal free SQL Injection Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR :...

Zanfi CMS lite / Jaw Portal free (fckeditor) Arbitrary File Upload Vuln

Exploit for unknown platform in category web applications ======================================================================= Zanfi CMS lite / Jaw Portal free fckeditor Arbitrary File Upload Vuln ======================================================================= !/usr/bin/perl use strict...

Zanfi CMS lite 2.1 Jaw Portal free - FCKeditor Arbitrary File Upload

Zanfi CMS lite 2.1 Jaw Portal free - FCKeditor Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

Zanfi CMS lite 1.2 - Multiple Local File Inclusions

Zanfi CMS lite 1.2 - Multiple Local File Inclusions +Zanfi CMS lite / Jaw Portal free index.php page Multiple Local File Inclusion +Discovered by SirGod +MorTal TeaM +Greetz E.M.I.N.EM,Ras,Puscasmarin,ToxicBlood,HrN,Kemrayz,007m + Dork : Powered by: Zanfi Solutions + Local File Inclusion PoC :...

Zanfi CMS lite 1.2 - Multiple Local File Inclusions

+Zanfi CMS lite / Jaw Portal free index.php page Multiple Local File Inclusion +Discovered by SirGod +MorTal TeaM +Greetz E.M.I.N.EM,Ras,Puscasmarin,ToxicBlood,HrN,Kemrayz,007m + Dork : Powered by: Zanfi Solutions + Local File Inclusion PoC : http://target/Pathindex.php?flag=Local File%00 Example...

zanficms-upload.txt

S.W.A.T. Title: Zanfi CMS lite / Jaw Portal free fckeditor Remote Arbitrary File Upload Vendor: http://www.zanfi.nl/down.php?file=ZanfiCmsLite.rar Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable The Uploader In Config File ; Demo:...

Zanfi CMS lite 1.2 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Zanfi CMS lite 1.2 Multiple Local File Inclusion Vulnerabilities ================================================================ +Zanfi CMS lite / Jaw Portal free index.php...

Zanfi CMS lite Jaw Portal free - page SQL Injection

Zanfi CMS lite Jaw Portal free - page SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Zanfi CMS lite / Jaw Portal free SQL Injection Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + +...

Zanfi CMS lite / Jaw Portal free (page) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Zanfi CMS lite / Jaw Portal free page SQL Injection Vulnerability =================================================================== APPLICATION : Zanfi CMS lite / Jaw...

zanficms-lfi.txt

+Zanfi CMS lite / Jaw Portal free index.php page Multiple Local File Inclusion +Discovered by SirGod +MorTal TeaM +Greetz E.M.I.N.EM,Ras,Puscasmarin,ToxicBlood,HrN,Kemrayz,007m + Dork : Powered by: Zanfi Solutions + Local File Inclusion PoC : http://target/Pathindex.php?flag=Local File%00 Example...

Zanfi CMS lite / Jaw Portal free - 'page' SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Zanfi CMS lite / Jaw Portal free SQL Injection Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR :...