141 matches found
Easybe 1-2-3 Music Store - 'process.php' SQL Injection
--==+================================================================================+==-- --==+ Easybe 1-2-3 Music Store SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...
easybe-sql.txt
--==+================================================================================+==-- --==+ Easybe 1-2-3 Music Store SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...
Code injection
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action...
CVE-2007-2168
Static code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote attackers to inject PHP code into config.php via the databasehost parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-2167
The CVE-2007-2167 issue affects AimStats 3.2 and is caused by a vulnerability in process.php where the number parameter in an update action allows remote attackers to inject PHP code into config.php. This is a static code injection scenario that could enable arbitrary code execution in the PHP en...
CVE-2007-2168
Static code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote attackers to inject PHP code into config.php via the databasehost parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
AimStats 3.2 (process.php update) Remote Code Execution Exploit
No description provided by source. !-- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + +&n...
AimStats 3.2 (process.php update) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =============================================================== AimStats 3.2 process.php update Remote Code Execution Exploit =============================================================== !--...
AimStats 3.2 - process.php?update Remote Code Execution
AimStats 3.2 - process.php?update Remote Code Execution !-- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + +...
Bubla <= 1.0.0rc2 (bu/process.php) Remote File Include Vulnerability
No description provided by source. DeltasecurityTEAM WwW.Deltasecurity.iR Portal Name = Bubla = 1.0.0rc2 Class = Remote File Inclusion Risk = High Remote File Execution Download = http://download.sourceforge.net/pub/sourceforge/b/bu/bubla/bubla-1.0.0rc1.tar.gz Discoverd By = DeltahackingTEAM User...
Bubla <= 1.0.0rc2 (bu/process.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Bubla = 1.0.0rc2 bu/process.php Remote File Include Vulnerability ==================================================================== DeltasecurityTEAM Portal Name = Bub...
CVE-2006-5386
PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULTSKIN parameter...
CVE-2006-5386
Summary of CVE-2006-5386: A PHP remote file inclusion in the NuralStorm Webmail project (versions 0.98b and earlier) can allow an attacker to execute arbitrary PHP code. This occurs when register_globals is enabled and an attacker supplies a URL in the DEFAULT_SKIN parameter that is processed by ...
NuralStorm Webmail 0.98b - process.php Remote File Inclusion
NuralStorm Webmail 0.98b - process.php Remote File Inclusion --------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn...
NuralStorm Webmail <= 0.98b (process.php) Remote Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
NuralStorm Webmail <= 0.98b (process.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== NuralStorm Webmail = 0.98b process.php Remote Include Vulnerability ======================================================================...
CVE-2006-0687
process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows remote attackers to include arbitrary local files or possibly remote files via a modified includeModule and siteModInfo variable...
docmgr_0542_incl_xpl
--------------- DocMGR Results For "".$searchString."" "; $option = null; if defined"USELDAP" if defined"GLOBALADMIN" $option"searchbase" = LDAPBASE; else $option"searchbase" = SEARCHBASE; //create our sear...
CVE-2005-3855
SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary SQL commands via the AlbumID parameter...
CVE-2005-3855
Affected product/component : 1-2-3 music store, process.php .Vulnerability : SQL injection via the AlbumID parameter, allowing remote attackers to execute arbitrary SQL commands.Root cause (as described) : unsafely constructed SQL in the application logic.Impact (per sources) : remote command exe...