dun

EIP-2026-112848 EXPLOITDB text WORKING POC

UCCASS 1.8.1 - Blind SQL Injection

View Code

CVE-2008-2394 EXPLOITDB text WORKING POC

Tagworx Cms - SQL Injection

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to contact.php and the (2) nid parameter to news.php.

View Code

CVE-2007-4369 EXPLOITDB text WORKING POC

SOTEeSKLEP <4.0 - Path Traversal

Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

View Code

EIP-2026-112480 EXPLOITDB text WORKING POC

SUMON 0.7.0 - Command Execution

View Code

CVE-2008-6402 EXPLOITDB text WRITEUP

Muskatli Sofi Webgui < 0.6.3pre - Code Injection

PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mod_dir parameter.

View Code

EIP-2026-111882 EXPLOITDB text WRITEUP

samart-cms 2.0 - 'contentsid' SQL Injection

View Code

EIP-2026-112008 EXPLOITDB text WORKING POC

sflog! - 'section' Local File Inclusion

View Code

EIP-2026-111873 EXPLOITDB text WRITEUP

sahana agasti 0.6.5 - Multiple Vulnerabilities

View Code

EIP-2026-111872 EXPLOITDB text WORKING POC

Sahana Agasti 0.6.4 - SQL Injection

View Code

CVE-2008-2964 EXPLOITDB text WORKING POC

Researchguide - SQL Injection

SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

View Code

CVE-2008-4739 EXPLOITDB text WORKING POC

Plugspace - Path Traversal

Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the navi parameter.

View Code

CVE-2008-5587 EXPLOITDB text WRITEUP

phpPgAdmin <4.2.1 - Path Traversal

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

View Code

CVE-2008-5989 EXPLOITDB text WORKING POC

PHPcounter <1.3.2 - Path Traversal

Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter.

View Code

CVE-2011-0405 EXPLOITDB perl WORKING POC

Phpgedview - Path Traversal

Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the pgvaction parameter.

View Code

EIP-2026-111143 EXPLOITDB text WRITEUP

phpMyBackupPro 2.2 - Local File Inclusion

View Code

CVE-2008-4331 EXPLOITDB text WORKING POC

Phpocs < 0.1 - Path Traversal

Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to index.php.

View Code

CVE-2008-6669 EXPLOITDB text WORKING POC

Dirk Bartley Nweb2fax < 0.2.7 - OS Command Injection

viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action.

View Code

CVE-2008-6403 EXPLOITDB text WRITEUP

Openrat < 0.8-beta4 - Code Injection

PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpl_dir parameter.

View Code

CVE-2008-4329 EXPLOITDB text WRITEUP

Openengine < 2.0_beta4 - Improper Input Validation

PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter.

View Code

CVE-2008-6025 EXPLOITDB text WRITEUP

openElec <3.01 - Path Traversal

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the obj parameter.

View Code

CVE-2009-0886 EXPLOITDB text WRITEUP

Oneorzero Helpdesk < 1.6.5.7 - Path Traversal

Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the default_language parameter.

View Code

CVE-2008-6410 EXPLOITDB text WORKING POC

Brian Wilson Ol'bookmarks < 0.7.5 - Path Traversal

Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the show parameter.

View Code

CVE-2008-4318 EXPLOITDB text WORKING POC

Observer < 0.3.2.1 - Improper Input Validation

Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.

View Code

EIP-2026-109884 EXPLOITDB text WRITEUP

NetOffice Dwins 1.4p3 - SQL Injection

View Code

CVE-2008-3420 EXPLOITDB text WORKING POC

Mobius for Mimsy XG <1.4.4.1 - SQL Injection

Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to browse.php or (2) the s parameter in an exhibitions action to detail.php.

View Code