FCKEditor 2.0 2.2 - FileManager connector.php Arbitrary File Upload

FCKEditor 2.0 2.2 - FileManager connector.php Arbitrary File Upload a short explaination: if a user cam call directly http://target/path/editor/filemanager/browser/default/connectors/php/connector.php he can upload malicious contempt on a target server, including arbitrary php code, and launch...

CVE-2006-0542

CVE-2006-0542 describes multiple SQL injection vulnerabilities in the NukedWeb GuestBookHost 2005.04.25, specifically in config.php where the email and password parameters are not properly sanitized. This allows remote attackers to execute arbitrary SQL commands via those parameters, potentially ...

CVE-2006-0542: Undefined Security Weakness

Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameters...

CVE-2005-4686

PunBB 1.2.9 (often with F-ART BLOG:CMS) includes config.php before calling unregister_globals, enabling exposure of unspecified sensitive information. Root cause: premature/configuration sequencing in the initialization flow. Impact is limited to information disclosure; no explicit vector or expl...

CVE-2005-4686: Undefined Security Weakness

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregisterglobals function, which allows attackers to obtain unspecified sensitive information...

Sql injection

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

CVE-2006-0372

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

CVE-2006-0372

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

BlogPHP config.php SQL injection login bypass

--------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 12 Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei -----------------Description--------------- Vulnerable scripts...

CVE-2006-0372: Undefined Security Weakness

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

CVE-2005-4686

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregisterglobals function, which allows attackers to obtain unspecified sensitive information...

CVE-2005-4214

CVE-2005-4214 concerns phpCOIN 1.2.2. Affected component: installation/config flow via config.php. Root cause: the _CCFG['_PKG_PATH_DBSE'] variable is not defined, causing an error message that leaks the installation path to remote attackers. Impact: partial disclosure of information (installatio...

CVE-2005-4214: Exposure of Sensitive Information to an Unauthorized Actor

phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks the path in an error message because the CCFG'PKGPATHDBSE' variable is not defined...

EkinBoard 1.0.3 (config.php) SQL Injection / Command Execution Exploit

Exploit for unknown platform in category web applications ====================================================================== EkinBoard 1.0.3 config.php SQL Injection / Command Execution Exploit ====================================================================== this works with magicquotesg...

EkinBoard 1.0.3 - config.php SQL Injection Command Execution

EkinBoard 1.0.3 - config.php SQL Injection Command Execution this works with magicquotesgpc off coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! required php.ini settings to launch this script: allowcalltimepassreference = on...

EkinBoard 1.0.3 (config.php) SQL Injection / Command Execution Exploit

No description provided by source. ?php ---ekin103xpl.php 10.47 16/11/2005 EkinBoard 1.0.3 config.php SQL Injection through cookie / remote commands execution --- this works with magicquotesgpc off coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields,...

EkinBoard 1.0.3 - '/config.php' SQL Injection / Command Execution

this works with magicquotesgpc off coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! required php.ini settings to launch this script: allowcalltimepassreference = on registerglobals = on Sun-Tzu: "The rising of birds in their flight is th...

CVE-2003-1253: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to 1 dbase.php, 2 config.php, or 3 common.load.php...

CVE-2005-2544

PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the pathdocroot parameter...

CVE-2005-2544: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the pathdocroot parameter...