CVE-2006-5765

Article Script 1.6.3 and earlier are vulnerable to an SQL injection in rss.php via the category parameter. The root cause is insufficient sanitization before SQL usage, enabling remote attackers to execute arbitrary SQL commands and potentially access or modify data. Exploitation details are docu...

PT-2006-6446 · Unknown · Article Script

Name of the Vulnerable Software and Affected Versions: Article Script versions 1.6.3 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the category parameter in the rss.php file. Recommendations: For Article Script versions 1.6.3 an...

Article Script <= 1.6.3 (rss.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Article Script admin4521title ------ Admin name :admin4521 http://www.victim.com/articles/cs1120/page1/link ---------- Admin password cs1120 Dork: "Powered by Article...

CVE-2006-5765: Undefined Security Weakness

SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2006-5766: Undefined Security Weakness

PHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the configpublicdir parameter...

Article Script 1.6.3 - rss.php SQL Injection

Article Script 1.6.3 - rss.php SQL Injection Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------...

Article Script v1.*and v1.6.3 Sql injection

Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------ :D http://www.victim.com/articles/rss.php?category= ' sql...

Article Script 1.6.3 - 'rss.php' SQL Injection

Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------ http://www.victim.com/articles/rss.php?category= ' sql njectio...

Article System 0.6 (volume.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= Article System 0.6 volume.php Remote File Include Vulnerability ================================================================= Coding 4 Fun c4f.pl Article System 0.6 ;...

Article System 0.6 (volume.php) Remote File Include Vulnerability

No description provided by source. Coding 4 Fun c4f.pl Article System 0.6 ; Class = Remote File Inclusion ; Download = http://sourceforge.net/project/showfiles.php?groupid=49971&packageid=43403&releaseid=325871 ; Found by = GregStar gregstaratc4fdotpl ;...

Article System 0.6 - 'volume.php' Remote File Inclusion

Coding 4 Fun c4f.pl Article System 0.6 ; Class = Remote File Inclusion ; Download = http://sourceforge.net/project/showfiles.php?groupid=49971&packageid=43403&releaseid=325871 ; Found by = GregStar gregstaratc4fdotpl ;...

CVE-2006-5383

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...

CVE-2006-5383

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...

CVE-2006-5383: Undefined Security Weakness

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...

Small ficus WIS vulnerability of supplementary articles and use article-vulnerability warning-the black bar safety net

: Yesterday I saw ALLyeSNO of this article, but always do not understand the original text that the meaning of the Until today...... Vulnerability found by : ALLyeSNO http://blog.csdn.net/freexploit/ WIS is a small ficus the development of the SQL vulnerability scanning tools WIS on the&character...

CVE-2006-4768

Multiple direct static code injection vulnerabilities in addgo.php in Stefan Ernst Newsscript aka WM-News 0.5 beta allow remote attackers to execute arbitrary PHP code via the 1 description, 2 issue, 3 title, 4 var, 5 name, 6 keywords, and 7 note parameters, which are stored in an article file...

CVE-2006-4714

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...

CVE-2006-4715

SQL injection vulnerability in pdfversion.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4715

CVE-2006-4715 : A SQL injection vulnerability in pdf_version.php affects SpoonLabs Vivvo Article Management CMS (aka phpWordPress)

CVE-2006-4714

The CVE-2006-4714 entry describes a PHP remote file inclusion in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL supplied to the classified_path parameter in index.php. Affect...