494 matches found
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter to 1 graph.php and 2 robotstats.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
CVE-2008-6206
CVE-2008-6206 involves multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1. The issue affects the scripts graph.php and robotstats.inc.php , where an attacker can supply a URL via the DOCUMENT_ROOT parameter to trigger remote code execution on the server. The vulnerability’s root...
CVE-2008-6165
SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...
CVE-2008-6165
CVE-2008-6165 refers to an SQL injection vulnerability in the PHP application component named gestion.php of CSPartner 0.1 . The flaw arises when magic_quotes_gpc is disabled , allowing remote attackers to inject arbitrary SQL via the parameters (1) pseudo and (2) passe . Exploitation details are...
Fluorine CMS 0.1 SQL Injection / Command Execution
!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...
Fluorine CMS 0.1 rc 1 FD / SQL Injection Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================== Fluorine CMS 0.1 rc 1 FD / SQL Injection Command Execution Exploit ================================================================== !/usr/bin/perl...
Fluorine CMS 0.1 rc 1 - File Disclosure / SQL Injection / Command Execution
!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...
CVE-2008-6038
SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...
Sql injection
SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...
CVE-2008-6038
CVE-2008-6038 describes a SQL injection vulnerability in the MapCal 0.1 application where the parameter id in the editevent action of index.php can be manipulated to execute arbitrary SQL commands. This remote issue could allow attackers to alter or read data, depending on the database and privil...
Sql injection
SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forumtopicid parameter...
CVE-2008-5571
SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...
CVE-2008-5571
SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...
CVE-2008-5571
CVE-2008-5571 describes an SQL injection vulnerability in the web app Professional Download Assistant 0.1 , specifically in admin/login.asp . An attacker can pass crafted values in the two fields, uname (user) or psw (passwd), to cause arbitrary SQL execution on the backend database. This can lea...
Professional Download Assistant 0.1 - SQL Injection
source: https://www.securityfocus.com/bid/32706/info Professional Download Assistant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...
lcxbbportal 0.1 alpha 2 - Remote File Inclusion
lcxbbportal 0.1 alpha 2 - Remote File Inclusion ============================================================================================================= o lcxBBportal 0.1 Alpha 2 Remote File Inclusion Vulnerability Software : lcxBBportal version 0.1 Alpha 2 Vendor :...
lcxbbportal 0.1 alpha 2 - Remote File Inclusion
============================================================================================================= o lcxBBportal 0.1 Alpha 2 Remote File Inclusion Vulnerability Software : lcxBBportal version 0.1 Alpha 2 Vendor : http://code.google.com/p/lcxbbportal/ Download :...
Broadcast Machine 0.1 - Multiple Remote File Inclusions
Broadcast Machine 0.1 - Multiple Remote File Inclusions ================================================================================================================= o Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability Software : Broadcast Machine version 0.1 Vendor :...
Broadcast Machine 0.1 - Multiple Remote File Inclusions
================================================================================================================= o Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability Software : Broadcast Machine version 0.1 Vendor : http://code.google.com/p/broadcastmachine/ View Source :...