Directory traversal

Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2002-2364

Technical details about CVE-2002-2364 are not publicly available in the provided documents; no affected products, fixes, or exploit specifics are disclosed. Monitor for updates.

CVE-2002-2364

Cross-site scripting XSS vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket...

FireConfig 0.5 - dl.php Remote File Disclosure

FireConfig 0.5 - dl.php Remote File Disclosure FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 milw0rm.com 2007-10-28...

Remote file inclusion

PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2007-5574

PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2007-5574

CVE-2007-5574 affects PHPDJ 0.5. A vulnerability in the djpage.php script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter (remote file inclusion). CVSS base score 6.8 (Medium) per NVD; exploitation details beyond a reference exist in linked sources, but no re...

CVE-2002-2274

Affected software: akfingerd 0.5 (and earlier per linked records). Vulnerable component: the .plan file handling in akfingerd, exploited via a symlink attack that lets local users read arbitrary files as the akfingerd user (nobody). Impact: local read access to arbitrary files; CVSS notes show lo...

PHPDJ 0.5 (djpage.php page) Remote File Inclusion Vulnerability

No description provided by source. PHPDJ v05 page Remote File Inclusion Vulnerability D.S: http://sourceforge.net/projects/phpdj/ D0RK : allintext:"PHPDJ was created by www.php-mania.co.uk" POC : /PHPDJv05/dj/djpage.php?page=evil-script.txt? Thanx To : Tryag.Com/cc & Asb-May.net/bb...

PHPDJ 0.5 (djpage.php page) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHPDJ 0.5 djpage.php page Remote File Inclusion Vulnerability =============================================================== PHPDJ v05 page Remote File Inclusion Vulnerabilit...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Thierry Leriche Restaurant Management System ReMaSys 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the DIRROOT parameter to a global.php, or the 2 DIRPAGE parameter to b template/fr/page.php or c...

CVE-2007-5167

PHP remote file inclusion vulnerability in .systeme/fonctions.php in phpLister 0.5-pre2 allows remote attackers to execute arbitrary PHP code via a URL in the nomrepsysteme parameter...

CVE-2007-4117

Affected software: phpWebFileManager 0.5. The issue is described as a PHP remote file inclusion vulnerability in index.php via the PN_PathPrefix parameter, allowing remote code execution. The underlying cause is the handling of PN_PathPrefix in the index.php file, with the note that a reliable th...

PT-2007-5319 · Php · Phpwebfilemanager

Name of the Vulnerable Software and Affected Versions: phpWebFileManager version 0.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the PN PathPrefix parameter in the index.php file. However, this issue is disputed by a reliable third party, who...

Insanely simple blog - Multiple vulnerabilities

Insanely simple blog version 0.5 and below http://sourceforge.net/projects/insanelysimple2 ISB contains multple vulnerabilities including both XSS, and SQL injection. First off, the search action fails to strip user content for html allowing a user to input tags. Next, anonymous blog entries can...

CVE-2007-3889

Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the currentsubsection parameter to index.php and other unspecified vectors...

CVE-2007-3888

Multiple cross-site scripting XSS vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the search action, possibly related to the term parameter to index.php; or 2 an anonymous blog entry, possibly involving the a postedby, b...

CVE-2007-3403

Unrestricted file upload vulnerability in upload.php in dreamLog aka dreamblog 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile parameter...

CVE-2007-3346

Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local files via unspecified manipulations of the page parameter...

Sql injection

Multiple SQL injection vulnerabilities in index.php in PHPAccounts 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 OutgoingTypeID, 2 OutgoingID, 3 ProjectID, 4 ClientID, 5 InvoiceID, or 6 VendorID parameter...