CVE-2006-5285

CVE-2006-5285: SQL injection in XeoPort 0.81 (index.php) via the xp_body_text parameter allowing remote arbitrary SQL execution. Underlying issue is insufficient input sanitization in xp_body_text handling. CVSS v2 base score 7.5 (HIGH); attack vector NETWORK, complexity LOW, no authentication re...

CVE-2006-5251

The CVE-2006-5251 entry concerns Deep CMS 2.0a where a PHP remote file inclusion flaw exists in index.php, enabling an attacker to execute arbitrary PHP code by supplying a URL via the ConfigDir parameter. The vulnerability is tied to Deep CMS’s handling of the ConfigDir value and is documented a...

CVE-2006-5251

PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP code via a URL in the ConfigDir parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Noah's Classifieds Cross Site Scripting Vulnerability

Noah's Classifieds is prone to a Cross Site Scripting Vulnerability, due to a failure in the application to properly sanitize the "frommethod" POST parameter in "index.php" : html body form method="POST" enctype="multipart/form-data" action="http://www.example.com/classifieds/index.php" input...

wikyblog.txt

============================================================================================== WikyBlog = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Bug in :index.php Vlu Code :...

phponline-rfi.txt

======================================================================= ======================= phponline = LangFile Remote File Inclusion Exploit ======================================================================= ======================== Bug in :index.php Vlu Code :...

CVE-2006-5206

SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in 1 index.php and 2 forum/index.php, when the rate command in the gallery automodule is used...

phponline <= (LangFile) Remote File Inclusion Exploit

======================================================================= ======================= phponline = LangFile Remote File Inclusion Exploit ======================================================================= ======================== Bug in :index.php Vlu Code :...

WikyBlog <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit

============================================================================================== WikyBlog = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Bug in :index.php Vlu Code :...

Ptl0.2.2.txt

ToXiC Ptl 0.2.2 Local File Inclusion by ToXiC CreW BuG FounD by Drago84 Application Affect:Ptl 0.2.2 Page: index.php Dir : / Problem: iffileexists$configMENUCONFFILE include "./".$configMENUCONFFILE; ExPloit : 1http://www.site.com/ptldir/lib/index.php?2configMENUCONFFILE=...

DayfoxBlogv2.0.txt

BiyoSecurity.Org script name : Dayfox Blog v2.0 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim Vulnerable files : adminlog.php postblog.php index.php index2.php Vulnerable code : includeonce $sloginpath . "/sloginlib.inc.php"; includeonce $sloginpath . "/header.inc.php"; Exploit :...

Flipv3.0.txt

hi... i find a new vub and i want to add the vub on your site... Found By Sp1deRNet .... E-mail....:- [email protected] My Site..... :- WWW.Pal-HackinG.Com //\ Freind Site....:- wWw.SoQoR.Net We Are..:- Sp1deRNet,HackerS Pal,Mohajali. Palstine HackerS Team. -=-=-=-=-=- The Bug In Script :-Fli...

CVE-2006-5128

SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter...

CVE-2006-5120

Multiple cross-site scripting XSS vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 index.php and 2 processlogin.php...

CVE-2006-5120

Multiple cross-site scripting XSS vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 index.php and 2 processlogin.php...

CVE-2006-5126

Affects PowerPortal 1.3a (John Himmelman). The PHP remote file inclusion vulnerability in index.php allows remote attackers to execute arbitrary PHP code via a URL in the file_name[] parameter. The issue is classified with a NVD base score of 7.5 (HIGH) and impacts confidentiality, integrity, and...

CVE-2006-5097

CVE-2006-5097 concerns net2ftp (version range ~0.1–0.62) and a PHP remote file inclusion in index.php via the application_rootdir parameter, potentially allowing arbitrary PHP code execution. The vulnerability is linked to this parameter, but it has been disputed by a third‑party researcher and b...

PT-2006-5835 · Net2Ftp · Net2Ftp

Name of the Vulnerable Software and Affected Versions: net2ftp versions 0.1 through 0.62 Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via a URL in the application rootdir parameter. However, this issue has been disputed by a...

PowerPortal 1.3a - index.php Remote File Inclusion

PowerPortal 1.3a - index.php Remote File Inclusion ============================================================================================== PowerPortal Remote File Include =============================================================================================== Critical Level :...

PowerPortal 1.3a (index.php) Remote File Include Vulnerability

No description provided by source. ============================================================================================== PowerPortal Remote File Include =============================================================================================== Critical Level : Dangerous scripts:...