CVE-2008-1164

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the modprojectid parameter in a projectdetail action...

phpcomasy-sql.txt

By Cr@zyKing / [email protected] phpComasy 0.8 modprojectid Remote Sql İnj. Vuln Script Down : http://www.phpcomasy.com/index.php?id=7&modaction=projectdetail&modprojectid=9 Page : index.php?id=7&modaction=projectdetail&modprojectid=Sql. Exp :...

phpComasy 0.8 (mod_project_id) Remote SQL Injection Vulnerability

No description provided by source. By Cr@zyKing / [email protected] phpComasy 0.8 modprojectid Remote Sql nj. Vuln Script Down : http://www.phpcomasy.com/index.php?id=7&modaction=projectdetail&modprojectid=9 Page : index.php?id=7&modaction=projectdetail&modprojectid=Sql. Exp :...

phpComasy 0.8 (mod_project_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= phpComasy 0.8 modprojectid Remote SQL Injection Vulnerability ================================================================= By email protectedKing phpComasy 0.8...

phpComasy 0.8 - 'mod_project_id' SQL Injection

By Cr@zyKing / [email protected] phpComasy 0.8 modprojectid Remote Sql Ä°nj. Vuln Script Down : http://www.phpcomasy.com/index.php?id=7&modaction=projectdetail&modprojectid=9 Page : index.php?id=7&modaction=projectdetail&modprojectid=Sql. Exp :...

Information disclosure

minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function...

CVE-2008-0259

Multiple directory traversal vulnerabilities in mg/php/mgthumbs.php in minimal Gallery 0.8 allow remote attackers to read arbitrary files via a .. dot dot in the 1 thumbcat and 2 thumb parameters...

CVE-2008-0260

minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function...

CVE-2008-0260

CVE-2008-0260 affects minimal Gallery 0.8. The issue is an information-disclosure vulnerability where an attacker can remotely obtain configuration information by requesting php_info.php, which invokes phpinfo. The exposed data could include server configuration details and environment settings. ...

CVE-2008-0259

CVE-2008-0259 affects minimal Gallery 0.8. Vulnerability in the PHP file _mg/php/mg_thumbs.php allows remote attackers to read arbitrary files through a directory traversal using the parameters (1) thumbcat and (2) thumb. The underlying cause is improper handling of user-supplied paths, enabling ...

CVE-2008-0259

Multiple directory traversal vulnerabilities in mg/php/mgthumbs.php in minimal Gallery 0.8 allow remote attackers to read arbitrary files via a .. dot dot in the 1 thumbcat and 2 thumb parameters...

minimal-disclose.txt

Script : minimal Gallery 0.8 Download : http://minimaldesign.net/downloads/projects/minimal-gallery BUG : Remote File Disclosure Vulnerability Dork : powered by minimal Gallery 0.8 Vulnerable CODE : /mg/php/mgthumbs.php readfile"../$thumbsdir/$thumbcat$thumb"; the variables thumbcat & thumb are...

minimal Gallery 0.8 - Remote File Disclosure

minimal Gallery 0.8 - Remote File Disclosure Script : minimal Gallery 0.8 Download : http://minimaldesign.net/downloads/projects/minimal-gallery BUG : Remote File Disclosure Vulnerability Dork : powered by minimal Gallery 0.8 Vulnerable CODE : /mg/php/mgthumbs.php...

minimal Gallery 0.8 Remote File Disclosure Vulnerability

No description provided by source. Script : minimal Gallery 0.8 Download : http://minimaldesign.net/downloads/projects/minimal-gallery BUG : Remote File Disclosure Vulnerability Dork : powered by minimal Gallery 0.8 Vulnerable CODE : /mg/php/mgthumbs.php readfile"../$thumbsdir/$thumbcat$thumb"; t...

minimal Gallery 0.8 - Remote File Disclosure

Script : minimal Gallery 0.8 Download : http://minimaldesign.net/downloads/projects/minimal-gallery BUG : Remote File Disclosure Vulnerability Dork : powered by minimal Gallery 0.8 Vulnerable CODE : /mg/php/mgthumbs.php readfile"../$thumbsdir/$thumbcat$thumb"; the variables thumbcat & thumb are...

minimal Gallery 0.8 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================== minimal Gallery 0.8 Remote File Disclosure Vulnerability ======================================================== Script : minimal Gallery 0.8 Download :...

CVE-2007-6484

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Improper access control

phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files under tmp/, and then hijack sessions via PHPSESSID cookies...

CVE-2007-6469

SQL injection vulnerability in index.php in phpRPG 0.8, when magicqutoesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-6469

CVE-2007-6469 affects phpRPG 0.8 with an SQL injection in index.php triggered via the username parameter when magic_quotes_gpc is disabled. Remote attackers could potentially execute arbitrary SQL commands. The public records supplied do not include exploitation details or a confirmed remediation...