the g0bl!n vulnerabilities and exploits

(subscribe to this query)

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote malicious users to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action.

Mrcgiguy The Ticket System 2.0

1 EDB exploit

SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote malicious users to execute arbitrary SQL commands via the id parameter in a viewticket action.

Mrcgiguy The Ticket System 2.0

1 EDB exploit

Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote malicious users to execute arbitrary SQL commands via (1) the uNev parameter (aka the username field) or (2) the uJelszo parameter (aka the Password field).

Submitterscript Submitterscript 2

1 EDB exploit

Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote malicious users to execute arbitrary code via a long string in a (1) .m3u or (2) .hpl playlist file.

Ondanera Hamster Audio Player 0.3a

2 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote malicious users to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php, and the (3) show parameter to main.php. NOTE: the provenance of this informati...

Plohni An Image Gallery 1.0

1 EDB exploit

Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote malicious users to execute arbitrary SQL commands via (1) the loginus parameter to Login.php or (2) the Old Password field to changepwd.php, and allow (3) remote authenticated administrators to execute arbi...

Beaussier Roomphplanning 1.6

1 EDB exploit

Login.php in RoomPHPlanning 1.6 allows remote malicious users to bypass authentication and obtain administrative access by setting the room_phplanning cookie to a value associated with the admin account.

Beaussier Roomphplanning 1.6

1 EDB exploit

SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote malicious users to execute arbitrary SQL commands via the id parameter in a View_seminar action to index.php.

Vollmar Com Seminar 1.28

1 EDB exploit

admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote malicious users to (1) delete arbitrary users via the user parameter or (2) delete arbitrary rooms via the room parameter.

Beaussier Roomphplanning 1.6

1 EDB exploit

SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote malicious users to execute arbitrary SQL commands via the user parameter (aka the username field). NOTE: some of these details are obtained from third party information.

Mygamescript My Game Script 2.0

1 EDB exploit

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook