John Martinelli

CVE-2007-2757 EXPLOITDB html WORKING POC

Redoable 1.2 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to (1) wp-content/themes/redoable/searchloop.php or (2) wp-content/themes/redoable/header.php.

View Code

CVE-2007-1956 EXPLOITDB text WRITEUP

Ubbcentral Ubb.threads < 6.1.1 - SQL Injection

SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the C parameter.

View Code

CVE-2007-2547 EXPLOITDB text WORKING POC

TurnkeyWebTools SunShop <4.0 - XSS

Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter.

View Code

CVE-2007-2549 EXPLOITDB text WORKING POC

TurnkeyWebTools SunShop <4.0 - SQL Injection

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) c or (2) quantity parameter.

View Code

CVE-2007-1905 EXPLOITDB text WORKING POC

Pineapple Technologies Quizshock < 1.6.1 - XSS

Cross-site scripting (XSS) vulnerability in auth.php in Pineapple Technologies QuizShock 1.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via encoded special characters in the forward_to parameter, as demonstrated using "&lt;&quot;&lt;".

View Code

CVE-2007-2207 EXPLOITDB html WORKING POC

Ripe Website Manager < 0.8.4 - SQL Injection

SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ripeformpost parameter.

View Code

CVE-2007-2247 EXPLOITDB html WORKING POC

Phpmyspace - SQL Injection

SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

View Code

EIP-2026-109976 EXPLOITDB text WORKING POC

NuclearBB Alpha 1 - Multiple SQL Injections

View Code

EIP-2026-107598 EXPLOITDB text WORKING POC

HLstats 1.35 - 'hlstats.php' Multiple Cross-Site Scripting Vulnerabilities

View Code

CVE-2007-2806 EXPLOITDB html WORKING POC

GaliX 2.0 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) galix_cat_detail, (2) galix_gal_detail, and (3) galix_cat_detail_sort parameters.

View Code

CVE-2007-2011 EXPLOITDB html WORKING POC

Deskpro - XSS

Cross-site scripting (XSS) vulnerability in login.php in DeskPro 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.

View Code

EIP-2026-105953 EXPLOITDB html WORKING POC

ClonusWiki 0.5 - 'index.php' HTML Injection

View Code

CVE-2007-1996 EXPLOITDB html WORKING POC

Codebreak < 1.1.2 - Code Injection

PHP remote file inclusion vulnerability in codebreak.php in CodeBreak, probably 1.1.2 and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the process_method parameter.

View Code

EIP-2026-106006 EXPLOITDB text WRITEUP

CMSCart 1.04 - 'maindatafunctions.php' SQL Injection

View Code

CVE-2007-3049 EXPLOITDB text WRITEUP

Buttercup Wfm - XSS

Cross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager (BWFM) May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter.

View Code

EIP-2026-100606 EXPLOITDB html WORKING POC

VP-ASP Shopping Cart 6.50 - 'ShopContent.asp' Cross-Site Scripting

View Code