born to k!ll vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) in the pdf_file parameter.

Assetman Assetman

1 EDB exploit

SQL injection vulnerability in blog.asp in ParsBlogger (Pb) allows remote malicious users to execute arbitrary SQL commands via the wr parameter.

Parsblogger Parsblogger Nil

1 EDB exploit

SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote malicious users to execute arbitrary SQL commands via the cat parameter.

Anserv Php Low Bids

1 EDB exploit

Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter.

Massimo Chioni Mobile Entertainment Module 1

1 EDB exploit

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote malicious users to execute arbitrary SQL commands via the sid parameter.

Sellatsite Php Classifieds Ads

1 EDB exploit

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote malicious users to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) note parameter to blog.php.

Netartmedia Blog System 1.5

1 EDB exploit

SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote malicious users to execute arbitrary SQL commands via the sbiz_id parameter.

Softbizscripts Article Directory Script

1 EDB exploit

Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when magic_quotes_gpc is disabled, allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the PageName parameter.

Instaguide Weather 1.0

1 EDB exploit

SQL injection vulnerability in public/page.php in Websens CMSbright allows remote malicious users to execute arbitrary SQL commands via the id_rub_page parameter.

Cmsbright Cmsbright

1 EDB exploit

Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote malicious users to read arbitrary files via a .. (dot dot) in the datei parameter.

Holtstraeter Rot 13

1 EDB exploit

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook