Debian: Security Advisory (DSA-264)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sql injection

SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header...

Sql injection

Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlanid parameter to 1 vlanview.php, 2 vlanedit.php, and 3 vlandel.php; the 4 assetclassgroupid parameter to assetclassgroupview.php; the 5 subnetid parameter to nodelist.php; and...

Sql injection

SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6578

SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6579

Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlanid parameter to 1 vlanview.php, 2 vlanedit.php, and 3 vlandel.php; the 4 assetclassgroupid parameter to assetclassgroupview.php; the 5 subnetid parameter to nodelist.php; and...

CVE-2007-6578

The CVE-2007-6578 entry documents a SQL injection in the PHP ZLink 0.3 application, specifically in go.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, as described in multiple sources (e.g., NVD entry). No mitigation, patch, or affected versi...

CVE-2007-6578

SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PHP ZLink 'go.php' SQL注入漏洞

PHP ZLink是一款基于PHP的WEB应用程序。 PHP ZLink不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'go.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Zeak.net PHP ZLink 0.3 目前没有解决方案提供： http://www.zeak.net/ !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/...

PHP ZLink 0.3 (go.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== PHP ZLink 0.3 go.php Remote SQL Injection Exploit =================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/ "; print...

m-phorum 0.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25394/info m-phorum is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Cross site scripting

Cross-site scripting XSS vulnerability in W1L3D4aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-4024

Cross-site scripting XSS vulnerability in W1L3D4aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-4024

CVE-2007-4024 is a reported XSS vulnerability affecting W1L3D4 Philboard 0.3, specifically in the W1L3D4_aramasonuc.asp script, where an attacker can inject arbitrary script via the searchterms parameter. The available documents only state a cross-site scripting flaw; they do not provide details ...

Remote file inclusion

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the viewspath parameter...

Immunity Canvas: LAVAGUE_INCLUDE

Name| lavagueinclude ---|--- CVE| CVE-2007-2607 Exploit Pack| CANVAS Description| LaVague 0.3 = Remote File Inclusion Vulnerability Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: adullact.net CVE Url: https://vulners.com/cve/CVE-2007-2607 CVE Name: CVE-2007-2607...

lavague-rfi.txt

LaVague 0.3 = Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR1:views/print/printbar.php require $viewspath."/progressbar.php"; BUG1: Example1:http://site.com/path/views/print/printbar.php?viewspath=Sh3LL Script Script Download http://admisource.gouv.fr/frs/?groupid=30&releaseid=145...

LaVague 0.3 - printbar.php?views_path Remote File Inclusion

LaVague 0.3 - printbar.php?viewspath Remote File Inclusion §§§§§§§§§§ §§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§...

CVE-2007-2073

CVE-2007-2073 : A PHP remote file inclusion vulnerability affects Ivan Gallery Script 0.3 (index.php) where the gallery parameter can be supplied via a URL in a new session to execute arbitrary PHP code. According to NVD, the affected vector is NETWORK with LOW attack complexity, no authenticatio...

Pickle 0.3 - download.php Local File Inclusion

Pickle 0.3 - download.php Local File Inclusion source: https://www.securityfocus.com/bid/22703/info picKLE is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local...