P-News <= 1.16 Remote File Include Vulnerability

No description provided by source. ============================================ P-News 1.16, 1.17 Remote File Inclusion Vulnerability ============================================ Discovered by vegas78 - feel82atweb.de ============================================ Greetz: scoper, corny, smaesch0r,...

P-News 1.16 - Remote File Inclusion

P-News 1.16 - Remote File Inclusion ============================================ P-News 1.16, 1.17 Remote File Inclusion Vulnerability ============================================ Discovered by vegas78 - feel82atweb.de ============================================ Greetz: scoper, corny, smaesch0r,...

P-News 1.16 - Remote File Inclusion

============================================ P-News 1.16, 1.17 Remote File Inclusion Vulnerability ============================================ Discovered by vegas78 - feel82atweb.de ============================================ Greetz: scoper, corny, smaesch0r, Sascha Schmalz, ReFleCtion, BleX,...

CVE-2006-3622: Undefined Security Weakness

The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' single quote in the p parameter, which displays the path in an error message. NOTE: it is not clear whether this is SQL injection or a forced SQL error...

CVE-2006-3341

CVE-2006-3341: SQL injection in annonces-p-f.php of the MyAds module 2.04jp for XOOPS (file: annonces-p-f.php; parameter: lid) allows remote execution of arbitrary SQL. Affected software is the MyAds 2.04jp XOOPS module; CVSSv2 shows AV:N/AC:L/Au:N/C:P/I:P/A:P with base score 7.5 (HIGH). Connecte...

CVE-2006-3341: Undefined Security Weakness

SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbitrary SQL commands via the lid parameter...

XOOPS myAds Module (lid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== XOOPS myAds Module lid Remote SQL Injection Vulnerability =========================================================== Xoops myAds module SQL-Injection Discovered: KeyCoder Visit :...

XOOPS myAds Module - lid SQL Injection

XOOPS myAds Module - lid SQL Injection Xoops myAds module SQL-Injection Discovered: KeyCoder Visit : www.grisapka.org Contact: [email protected] Thanx: SecretlyX-BeLa --------------------------------------- Details : Xoops myAds module SQL-Injection Vulnerability Website : http://www.xoops.org/...

XOOPS myAds Module - 'lid' SQL Injection

Xoops myAds module SQL-Injection Discovered: KeyCoder Visit : www.grisapka.org Contact: [email protected] Thanx: SecretlyX-BeLa --------------------------------------- Details : Xoops myAds module SQL-Injection Vulnerability Website : http://www.xoops.org/ Vulnerable File : annonces-p-f.php PoC :...

CVE-2006-3264: Undefined Security Weakness

Cross-site scripting XSS vulnerability in mclient.cgi in Namo DeepSearch 4.5 allows remote attackers to inject arbitrary web script or HTML via the p parameter...

CVE-2006-2745: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathfile parameter in a p-editpage.php and b p-editbox.php, and the 2 mytheme and 3 myskin...

CVE-2006-2744: Undefined Security Weakness

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...

Authentication flaw

ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic...

CVE-2006-2562

The CVE-2006-2562 entry concerns the ZyXEL P-335WT router. A UPnP flaw (InternalClient parameter not validated) allows remote attackers to bypass access restrictions and perform unauthorized operations, demonstrated by using AddPortMapping to forward arbitrary traffic. According to NVD, the vulne...

PT-2006-3508 · Zyxel · Zyxel P-335Wt

Name of the Vulnerable Software and Affected Versions: ZyXEL P-335WT router affected versions not specified Description: The issue allows remote attackers to bypass access restrictions and conduct unauthorized operations. This is achieved via a UPnP request with a modified InternalClient paramete...

CVE-2006-2562: Undefined Security Weakness

ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic...

PT-2006-3421 · Openwiki · Openwiki

Name of the Vulnerable Software and Affected Versions: OpenWiki version 0.78 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the p parameter in the ow.asp file. This issue has been disputed by the vendor, who claims that code...

CVE-2006-2473: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this issue has been disputed by the vendor and a third party who is affiliated with the product. The vendor states "You cannot insert code in...

CVE-2006-2001: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this is a different vulnerability than the directory traversal vector...

CVE-2006-1996: Undefined Security Weakness

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message...