Sunbyte eFlower is an e-commerce system that helps your florist shop takes order through Internet. An attacker can exploit a SQL injection vulnerability in the 'index.php' script by supplying a specially crafted 'id' parameter value. This can allow an attacker to execute arbitrary SQL commands on the underlying database.
A Blind SQL injection vulnerability exists in the Joomla Component com_calendario. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable application. This can allow the attacker to gain access to sensitive information stored in the database.
A buffer overflow vulnerability exists in M.J.M. Quick Player v1.2. An attacker can exploit this vulnerability to execute arbitrary code in the context of the application. This can potentially allow the attacker to take control of the affected system. The vulnerability is due to a boundary error when handling specially crafted .m3u files. An attacker can exploit this vulnerability by enticing a user to open a specially crafted .m3u file with the vulnerable application. This can be done by sending the file as an email attachment or by hosting the file on a malicious website.
Calendar Express 2.0 is vulnerable to a SQL injection vulnerability. An attacker can exploit this vulnerability by sending a specially crafted HTTP POST request to the vulnerable application. The request contains malicious SQL code that is executed in the backend database. This can allow an attacker to gain access to sensitive information such as usernames, passwords, and other confidential data stored in the database.
This vulnerability allows an attacker to upload a malicious file to a vulnerable web application. The attacker can then access the file by accessing the URL of the uploaded file. The vulnerable application in this case is a PHP Forum ohne My SQL. The exploit involves changing the file extension of a malicious file to a valid image file extension, such as .jpeg, and then uploading it to the vulnerable application. The attacker can then access the malicious file by accessing the URL of the uploaded file.
MySimpleFileUploader V1.6 is vulnerable to an upload shell vulnerability. An attacker can exploit this vulnerability by changing the type of file to c99.php.sisx and uploading a malicious shell. This will allow the attacker to gain access to the server.
egegen turkish script is vulnerable to SQL Injection. An attacker can inject malicious SQL queries via the 'id' parameter in the 'urunDetay' page. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
The Joomla component com_if_nexus is vulnerable to a Local File Inclusion vulnerability. This vulnerability allows an attacker to include a local file on the server, such as a configuration file, and execute arbitrary code. This vulnerability is due to the lack of proper input validation in the application. An attacker can exploit this vulnerability by crafting a malicious URL and sending it to the target user.
An attacker can exploit this vulnerability by sending a maliciously crafted request to the vulnerable application. This can allow the attacker to upload a malicious file to the server, which can be used to execute arbitrary code.
A vulnerability in Yonja, LLC. allows an attacker to upload a malicious shell to the vulnerable server. The attacker can then execute arbitrary code on the server.
Services By CQR