Lucene search
+L

111 matches found

exploitpack
exploitpack
added 2007/05/10 12:00 a.m.18 views

Original 0.11 - config.inc.php?x[1] Remote File Inclusion

Original 0.11 - config.inc.php?x1 Remote File Inclusion Original Version 0.11config.inc.php Remote File Inclusion Vulnerability D.Script: http://xanatos.glo.org.mx/bi/original-0.11.tar.bz2 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.Com/cc Exploit:Path/inc/config.inc.php?x1=Shell...

7.5AI score
SaveExploits0
CVE
CVE
added 2007/05/09 1:00 a.m.46 views

CVE-2007-2542

CVE-2007-2542 affects workbench survival guide 0.11, where header.php is vulnerable to a PHP remote file inclusion via the path parameter, enabling arbitrary PHP code execution. The NVD entry describes the vulnerability as a PHP RFI with network access and no authentication, with a base CVSSv2 sc...

7.5CVSS7.5AI score0.0267EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2007/05/09 1:00 a.m.25 views

CVE-2007-2542

PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

7.5AI score0.0267EPSS
SaveExploits2References5
Fedora
Fedora
added 2007/02/26 10:11 p.m.16 views

[SECURITY] Fedora Core 5 Update: devhelp-0.11-6.fc5

An API document browser for GNOME 2...

2AI score
SaveExploits0
Cvelist
Cvelist
added 2006/09/07 12:00 a.m.32 views

CVE-2006-4610

PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the page parameter...

7.6AI score0.04139EPSS
SaveExploits2References10
CVE
CVE
added 2006/09/07 12:00 a.m.52 views

CVE-2006-4610

The CVE-2006-4610 vulnerability affects GrapAgenda (version 0.11 and earlier). It is a PHP remote file inclusion due to input handling in index.php when register_globals is enabled, allowing an attacker to cause arbitrary PHP code execution via the page parameter. The issue stems from enabling re...

5.1CVSS7.6AI score0.04139EPSS
SaveExploits2References10Affected Software1
NVD
NVD
added 2005/12/20 2:03 a.m.22 views

CVE-2005-4387

Cross-site scripting XSS vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...

4.3CVSS5.7AI score0.01177EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2005/12/20 2:00 a.m.28 views

CVE-2005-4387

Cross-site scripting XSS vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...

5.7AI score0.01177EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2005/05/24 4:00 a.m.33 views

CVE-2005-1736

PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended...

6.5AI score0.01103EPSS
SaveExploits0References2
CVE
CVE
added 2005/05/24 4:00 a.m.53 views

CVE-2005-1736

Technical details about this CVE are not publicly available in the provided documents. Monitor for updates on affected versions, root cause specifics, and remediation.

7.5CVSS7AI score0.01103EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2002/05/03 4:00 a.m.44 views

CVE-2002-0286

The CVE affects SiteNews 0.10 and 0.11. In function.php, the GetPassword routine can be abused when a remote attacker supplies a non-existent username and the MD5 checksum of an empty password to add_user.php. This causes GetPassword to generate and compare a blank password for the non-existent u...

7.5CVSS7.5AI score0.01571EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder