garwga

2 exploits Active since May 2010

CVE-2010-1453 EXPLOITDB text WORKING POC

Matomo 0.1.6-0.5.5 - Cross-Site Scripting via Login Form form_url Parameter

Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inject arbitrary web script or HTML via the form_url parameter.

View Code

CVE-2010-3029 EXPLOITDB php WORKING POC

phpkick 0.8 - SQL Injection via Gameday Parameter

SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday parameter in an overview action.

View Code