Lucene search
+L

358 matches found

Cvelist
Cvelist
added 2007/04/12 7:00 p.m.38 views

CVE-2007-2008

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

7.1AI score0.02435EPSS
SaveExploits1References3
CVE
CVE
added 2007/04/12 7:00 p.m.50 views

CVE-2007-2007

CVE-2007-2007 affects admin.php in pL-PHP beta 0.9. The vulnerability allows remote attackers to bypass authentication by setting the is_admin parameter to 1, enabling unauthorized access. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with Network attack vector, Low attack complexity, ...

7.5CVSS6.9AI score0.02663EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2007/04/12 7:00 p.m.59 views

CVE-2007-2008

CVE-2007-2008 is a directory traversal vulnerability in pL-PHP beta 0.9 (admin.php) allowing remote attackers to include and execute arbitrary local files via a .. in the lang parameter. The NVD entry confirms the vulnerability and impact (partial confidentiality, integrity, and availability affe...

7.5CVSS7.1AI score0.02435EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2007/04/10 11:19 p.m.19 views

Directory traversal

Directory traversal vulnerability in index.php in witshare 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the menu parameter...

7.5CVSS7.6AI score0.02938EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2007/04/10 11:00 p.m.31 views

CVE-2007-1928

Directory traversal vulnerability in index.php in witshare 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the menu parameter...

7.1AI score0.02938EPSS
SaveExploits1References6
zdt
zdt
added 2007/04/10 12:00 a.m.35 views

pL-PHP beta 0.9 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== pL-PHP beta 0.9 Multiple Remote Vulnerabilities =============================================== . . . . | . .| . .;/ || Infos --------- Date : 2007-04-10 Product : pL-PHP Version : beta 0.9 -...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/04/10 12:00 a.m.29 views

pl-PHP Beta 0.9 - Multiple Vulnerabilities

pl-PHP Beta 0.9 - Multiple Vulnerabilities . . . . | . .| . .;/ || Infos --------- Date : 2007-04-10 Product : pL-PHP Version : beta 0.9 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/pl-php/ - http://www.karlcore.com/programming/blog/ Vendor Status : 2007-04-10 -...

SaveExploits0
seebug.org
seebug.org
added 2007/04/10 12:00 a.m.34 views

pL-PHP beta 0.9 Multiple Remote Vulnerabilities

No description provided by source. . . . . | . .| . .;/ || Infos --------- Date : 2007-04-10 Product : pL-PHP Version : beta 0.9 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/pl-php/ - http://www.karlcore.com/programming/blog/ Vendor Status : 2007-04-10 - Not...

7.1AI score
SaveExploits0
zdt
zdt
added 2007/04/08 12:00 a.m.23 views

WitShare 0.9 (index.php menu) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ WitShare 0.9 index.php menu Local File Inclusion Vulnerability ================================================================ """"""""""""""""""""""""""""""""""""""""""""""...

7.1AI score
SaveExploits0
Cvelist
Cvelist
added 2007/03/28 12:00 a.m.27 views

CVE-2007-1719

Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to execute arbitrary code via a long command line argument, possibly involving the device name...

7.4AI score0.01259EPSS
SaveExploits1References4
CVE
CVE
added 2006/12/27 12:00 a.m.37 views

CVE-2006-6748

CVE-2006-6748 involves a PHP remote file inclusion in i-accueil.php of Newxooper 0.9 and earlier. An attacker can cause arbitrary PHP code execution by supplying a URL in the chemin parameter, enabling remote compromise of affected installations. The description notes that provenance is third-par...

7.5CVSS7.7AI score0.01246EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2006/12/27 12:00 a.m.23 views

CVE-2006-6748

PHP remote file inclusion vulnerability in i-accueil.php in Newxooper 0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

7.3AI score0.01246EPSS
SaveExploits0References1
CVE
CVE
added 2006/12/01 12:00 a.m.47 views

CVE-2006-6185

CVE-2006-6185 affects Wabbit PHP Gallery 0.9. The vulnerability is a directory traversal in script.php, allowing remote attackers to read arbitrary files by supplying an encoded or plain '..' in the dir parameter to index.php. The NVD entry lists this flaw with a base score of 5.0 (Medium) and a ...

5CVSS7.1AI score0.03438EPSS
SaveExploits2References7Affected Software1
CVE
CVE
added 2006/11/20 9:00 p.m.42 views

CVE-2006-5985

Extreme CMS 0.9 is affected by multiple XSS vulnerabilities in admin/options.php, exploitable via the parameters bg1, bg2, text, or size. The issue is documented with a CVSS v2 base score of 6.8 (MEDIUM) and indicates remote attackers can inject script/HTML; no exploit details or patches are prov...

6.8CVSS6AI score0.0113EPSS
SaveExploits0References2Affected Software1
seebug.org
seebug.org
added 2006/10/27 12:00 a.m.18 views

ask_rave <= 0.9 PR (end.php footfile) Remote File Include Vulnerability

No description provided by source. ================================================================== askrave RFI ================================================================== Info:- Scripts: askrave Download: http://rave.jk-digital.com/site/scripts/files/ask09PR.zip Version : 0.9 PR Dork &...

7.1AI score
SaveExploits0
zdt
zdt
added 2006/10/26 12:00 a.m.61 views

ask_rave <= 0.9 PR (end.php footfile) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= askrave = 0.9 PR end.php footfile Remote File Include Vulnerability =======================================================================...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2006/10/26 12:00 a.m.15 views

ask_rave 0.9 PR - end.php?footfile Remote File Inclusion

askrave 0.9 PR - end.php?footfile Remote File Inclusion ================================================================== askrave RFI ================================================================== Info:- Scripts: askrave Download: http://rave.jk-digital.com/site/scripts/files/ask09PR.zip...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/10/26 12:00 a.m.46 views

ask_rave 0.9 PR - 'end.php?footfile' Remote File Inclusion

================================================================== askrave RFI ================================================================== Info:- Scripts: askrave Download: http://rave.jk-digital.com/site/scripts/files/ask09PR.zip Version : 0.9 PR Dork & vuln : download scripts and think :...

7.5CVSS5.8AI score0.0276EPSS
SaveExploits2
NVD
NVD
added 2006/10/25 10:07 a.m.13 views

CVE-2006-5491

Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

7.5CVSS8.7AI score0.01161EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2006/10/25 10:00 a.m.26 views

CVE-2006-5491

Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

8.7AI score0.01161EPSS
SaveExploits0References5
Rows per page
Query Builder