CVE-2006-6592: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code via a URL in the pagepath parameter to 1 index.php, 2 admin.php, 3 rss.php, 4 rdf.php, 5 rss2.php, or 6 files/mainfile.php...

CVE-2006-6284

Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. dot dot sequence in the act parameter...

CVE-2006-6284

Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. dot dot sequence in the act parameter...

CVE-2006-6284

Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. dot dot sequence in the act parameter...

CVE-2006-6284

CVE-2006-6284 affects Vikingboard 0.1.2. A directory traversal vulnerability in the file admin.php allows remote authenticated administrators to include arbitrary files via a .. sequence in the act parameter. According to NVD, the vulnerability has a CVSS v2 base score of 9.0 (HIGH) with network ...

CVE-2006-6284: Undefined Security Weakness

Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. dot dot sequence in the act parameter...

CVE-2006-6176

Cross-site scripting XSS vulnerability in admin.php in Blogn before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2006-6176

CVE-2006-6176 describes a Cross-site Scripting (XSS) vulnerability in Blogn’s admin.php in versions before 1.9.4, allowing remote attackers to inject arbitrary script/HTML via unspecified parameters. The NVD entry lists a base score of 6.8 (Medium) with network attack vector and no authentication...

CVE-2006-6176: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin.php in Blogn before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Pearl Forums 2.4 Multiple Remote File Include Vulnerabilities

| | / | / | | | | | / | / / | | | | '| | |/| |/ / / / / | | '| | | / | | || | | | | | | | | / | | | | || |/|| || ||,// / ||| ,|/ ///////////////////////////////////////////////////////////////////////////////////////////////////////////// //Script:Pearl Forums //Author: Dr Max Virus...

CVE-2006-5804

CVE-2006-5804 is a PHP remote file inclusion vulnerability in Advanced Guestbook 2.3.1 (admin.php) that allows an attacker to execute arbitrary PHP code via a URL supplied to the include_path parameter. The PT-2006-6481 entry for the same product version 2.3.1 corroborates this vector, detailing ...

PT-2006-6481 · Unknown · Advanced Guestbook

Name of the Vulnerable Software and Affected Versions: Advanced Guestbook version 2.3.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter in the admin.php file. Recommendations: For Advanced Guestbook version 2.3.1, consider...

CVE-2006-5804: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

Advanced Guestbook 2.3.1 (Admin.php) Remote File Include

Advanced Guestbook 2.3.1 Admin.php Remote File Include Author: BrokeN-ProXy Script : admin.php Found : www.hotscripts.com Risk : Dangerous Dork : "powered by: Advanced Guestbook 2.3.1" Exploit: www.Site.com/AGuest Path/admin.php?includepath=Shell?cmd Notice: AGuest Path may be more than One, You...

CVE-2006-5667: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...

P-Book <= 1.17 (pb_lang) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== P-Book = 1.17 pblang Remote File Inclusion Vulnerabilities ============================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / ...

P-Book 1.17 - 'pb_lang' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...

CVE-2006-5451

Multiple cross-site scripting XSS vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 action, 2 file, and 3 users array variables in a admin.php, which are not properly handled when the administrator views the Activity Log; and the 4 torrent...

CVE-2006-5451

CVE-2006-5451 describes multiple XSS flaws in TorrentFlux 2.1. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via: (1) admin.php parameters (action, file, users array) when viewing the Activity Log, and (2) startpop.php torrent parameter used by displayName. The vector...

CVE-2006-5451: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 action, 2 file, and 3 users array variables in a admin.php, which are not properly handled when the administrator views the Activity Log; and the 4 torrent...