Clansys 1.1 - index.php PHP Code Insertion

Clansys 1.1 - index.php PHP Code Insertion NukedX Security Advisory Nr 2006-29 ClanSys v1.1 index.php page PHP Code Insertion Vulnerability Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory:...

Sql injection

SQL injection vulnerability in index.php in MyBB MyBulletinBoard before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter...

CVE-2006-1974

SQL injection vulnerability in index.php in MyBB MyBulletinBoard before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter...

CVE-2006-1974

CVE-2006-1974: SQL injection in MyBB (MyBulletinBoard) index.php via the referrer parameter, affecting versions before 1.04. Exploitation could allow remote SQL commands with partial confidentiality and integrity impact. Fix: upgrade to 1.04 or later; apply vendor patches as available. If details...

CVE-2005-4787

Turnkey Web Tools SunShop Shopping Cart is affected by CVE-2005-4787 via endpoints that execute PHP’s phpinfo() (index.php, admin/index.php, admin/adminindex.php), potentially exposing sensitive information. The root cause is the direct invocation of phpinfo() in these pages, enabling information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...

Directory traversal

Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ modified dot dot slash in the file parameter, which causes a regular expression to collapse the sequences into standard "../" sequences...

CVE-2006-1918

Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...

CVE-2006-1918

CVE-2006-1918 affects Papoo 2.1.5. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the menuid parameter in index.php or forum.php, and the reporeid_print parameter in print.php. The root cause is improper sanitization of input leading to script/HTML injection. Docum...

CVE-2006-1909

The CVE-2006-1909 vulnerability affects Coppermine Photo Gallery, specifically index.php in version 1.4.4. It allows Local File Inclusion/Directory Traversal through the file parameter using patterns like .//./, collapsing to ../ and enabling reading arbitrary local files and potentially executin...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1904

CVE-2006-1904 is a cross-site scripting (XSS) vulnerability reported in the AnimeGenesis Gallery project, affecting the file index.php. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating the cat parameter. Public references include NVD entry with the XSS desc...

CVE-2006-1878

Cross-site scripting XSS vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the twgalbum parameter...

CVE-2006-1807

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...

CVE-2006-1809

index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message...

Directory traversal

Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the language parameter...

CVE-2006-1806

CVE-2006-1806 describes a cross-site scripting (XSS) vulnerability in Musicbox 2.3.3 and earlier. The issue is triggered via the term parameter in a search action within index.php, allowing remote attackers to inject arbitrary web script or HTML. The NVD entry for this CVE confirms the vulnerable...