2391 matches found
Speedwiki 2.0 Arbitrary File Upload Vulnerability
product :Speedwiki 2.0 vendor site: http://speedywiki.sourceforge.net/ risk:critical a user logged in , can upload a PHP script on the server , by the upload script , there's actually no upload filter on this cms path : /speedywiki/index.php?upload=1 xss get :...
CVE-2006-5788: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in 1 index.php and 2 admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to execute arbitrary PHP code via a URL in the p parameter...
CVE-2006-5667
Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...
EUVD-2006-5652
Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...
CVE-2006-5667
Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...
CVE-2006-5667
CVE-2006-5667 affects P-Book up to version 1.17. The vulnerability is described as multiple PHP remote file inclusion flaws allowing an attacker to execute arbitrary PHP code by supplying a URL in the pb_lang parameter to admin.php and pbook.php. The connected records consistently reference this ...
CVE-2006-5667: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...
P-Book <= 1.17 (pb_lang) Remote File Inclusion Vulnerabilities
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...
P-Book <= 1.17 (pb_lang) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== P-Book = 1.17 pblang Remote File Inclusion Vulnerabilities ============================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / ...
P-Book 1.17 - 'pb_lang' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...
P-Book 1.17 - pb_lang Remote File Inclusion
P-Book 1.17 - pblang Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...
[ECHO_ADV_56$2006] P-Book <= 1.17 (pb_lang) Remote File Inclusion
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion ------------------------------------------------------------------------------ Author : Ahmad...
CVE-2006-5524: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in phplist 2.10.2 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: This issue might overlap CVE-2006-5321...
CVE-2006-5434
PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pnlang parameter...
CVE-2006-5434
PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pnlang parameter...
CVE-2006-5434
CVE-2006-5434 is a PHP remote file inclusion vulnerability in P-News versions 1.16 and 1.17. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the pn_lang parameter, enabling arbitrary code execution. The NVD entry lists a high impact (base score 7.5; Confidenti...
CVE-2006-5434: Undefined Security Weakness
PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pnlang parameter...
[ECHO_ADV_46$2006] P-Book <= 1.17 (pb_lang) Remote File Inclusion
ECHOADV56$2006 ------------------------------------------------------------------------ ----- ECHOADV46$2006 P-Book = 1.17 pblang Remote File Inclusion ------------------------------------------------------------------------ ------ Author : Ahmad Maulana a.k.a Matdhule Date Found : October, 18th...
P-News <= 1.16 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================ P-News = 1.16 Remote File Include Vulnerability ================================================ ============================================ P-News 1.16, 1.17 Remote File Inclusion...
P-News <= 1.16 Remote File Include Vulnerability
No description provided by source. ============================================ P-News 1.16, 1.17 Remote File Inclusion Vulnerability ============================================ Discovered by vegas78 - feel82atweb.de ============================================ Greetz: scoper, corny, smaesch0r,...