1366 matches found
CVE-2007-6501
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...
e107 0.7.8 - photograph Arbitrary File Upload
e107 0.7.8 - photograph Arbitrary File Upload / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title e107 = 0.7.8 - Arbitrary File Upload Description "e107 is a content management system written in PHP...
e107 <= 0.7.8 (photograph) Arbitrary File Upload Vulnerability
Exploit for unknown platform in category web applications ============================================================== e107 = 0.7.8 photograph Arbitrary File Upload Vulnerability ============================================================== / \ / \ | | | | | | | | | | | / | | | | | | | ' / | |...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP code via a URL in the supadbpath parameter to 1 commonfunctions.php, 2 adminauthcookies.php, 3 adminmods.php, 4 adminnews.php, 5 admintopics.php, 6 adminusers.php, 7...
CVE-2007-2082
CVE-2007-2082 describes a direct static code injection vulnerability in admin/settings.php for MyBlog 0.9.8 and earlier. The issue allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. A separate vulnerability...