clever copy clever copy vulnerabilities and exploits

(subscribe to this query)

Magus Perde Clever Copy 3.0 and previous versions stores sensitive information under the web root with insufficient access control, which allows remote malicious users to view the database username and password via a direct request for connect.inc.

Clever Copy Clever Copy Clever Copy Clever Copy 1.0.0 Clever Copy Clever Copy 1.0.1 Clever Copy Clever Copy 1.0.2 Clever Copy Clever Copy 1.0.3 Clever Copy Clever Copy 2.0 Clever Copy Clever Copy 2.0a Clever Copy Clever Copy 23.0

1 EDB exploit

SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the ID parameter.

Clever Copy Clever Copy 1.0.0 Clever Copy Clever Copy 1.0.1 Clever Copy Clever Copy 1.0.2 Clever Copy Clever Copy 1.0.3 Clever Copy Clever Copy 2.0 Clever Copy Clever Copy 2.0a Clever Copy Clever Copy 3.0

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote malicious users to inject arbitrary web script or HTML via the (1) Referer or (2) X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Si...

Clever Copy Clever Copy 2.0a Clever Copy Clever Copy 23.0 Clever Copy Clever Copy 2.0

Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote malicious users to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php.

Clever Copy Clever Copy 2.0 Clever Copy Clever Copy 2.0a

2 EDB exploits

Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote malicious users to inject arbitrary web script or HTML via the yr parameter to calendar.php.

Clever Copy Clever Copy 2.0 Clever Copy Clever Copy 2.0a

1 EDB exploit

Clever Copy 2.0 and 2.0a allows remote malicious users to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (...

Clever Copy Clever Copy 2.0a Clever Copy Clever Copy 2.0

Multiple SQL injection vulnerabilities in Clever Copy 3.0 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php.

Clever Copy Clever Copy

Cross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the album parameter.

Clever Copy Clever Copy

Cross-site scripting (XSS) vulnerability in default.php in Clever Copy 3.0 allows remote malicious users to inject arbitrary web script or HTML via the Subject field when sending private messages (privatemessages.php). NOTE: the provenance of this information is unknown; the deta...

Clever Copy Clever Copy 3.0

SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote malicious users to execute arbitrary SQL commands via the searchtype parameter.

Clever Copy Clever Copy 3.0

1 EDB exploit

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook