ask_rave 0.9 PR - 'end.php?footfile' Remote File Inclusion

================================================================== askrave RFI ================================================================== Info:- Scripts: askrave Download: http://rave.jk-digital.com/site/scripts/files/ask09PR.zip Version : 0.9 PR Dork & vuln : download scripts and think :...

ask_rave <= 0.9 PR (end.php footfile) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= askrave = 0.9 PR end.php footfile Remote File Include Vulnerability =======================================================================...

CVE-2006-5491

Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

CVE-2006-5491

The CVE-2006-5491 entry describes multiple SQL injection vulnerabilities in include/index.php of UltraCMS 0.9, permitting remote attackers to execute arbitrary SQL commands via the username or password parameters. This indicates inadequate input handling in the affected PHP code path. The connect...

CVE-2006-5491

Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

UltraCMS-0.9.txt

Tunis the 18 October 2006 bug found by fireboy product:UltraCMS 0.9 there is an sql injection problem in UltraCMS 0.9 and it can be exploited to gain admin privileges. exploit: user: 'or''=' pass: 'or''=' example : http://www.target.com/include/index.php thx...

UltraCMS 0.9 sql injection

Tunis the 18 October 2006 bug found by fireboy product:UltraCMS 0.9 there is an sql injection problem in UltraCMS 0.9 and it can be exploited to gain admin privileges. exploit: user: 'or''=' pass: 'or''=' example : http://www.target.com/include/index.php thx...

CVE-2006-3542

CVE-2006-3542 affects Garry Glendown Shopping Cart 0.9. The vulnerabilities are multiple cross-site scripting (XSS) flaws that allow an attacker to inject arbitrary web script or HTML via the shop name field in the pages editshop.php, edititem.php, and index.php, and via the item field in editsho...

CVE-2006-3542

Multiple cross-site scripting XSS vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 shop name field in a editshop.php, b edititem.php, and c index.php; and via the 2 item field in editshop.php and edititem.php...

PT-2006-4105 · Rig · Ralf Image Gallery

Name of the Vulnerable Software and Affected Versions: Ralf Image Gallery RIG versions 0.7.4 through 0.9 Description: The issue allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks when register globals is enabled. This can be achieved via URLs or ".."...

Cross site scripting

Cross-site scripting XSS vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary web script or HTML via the kwd parameter...

CVE-2006-2000

The provided connected sources confirm a concrete vulnerability: Cross-site Scripting (XSS) in logMethods 0.9, specifically in /lms/a2z.jsp, exploitable via the kwd parameter. This is a remote, client-side script injection risk that could allow an attacker to execute arbitrary HTML/JavaScript in ...

CVE-2006-0810

Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection...

CVE-2006-0809

Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...

Sql injection

Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...

CVE-2006-0811

Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...

Cross site scripting

Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...

CVE-2006-0811

Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...

CVE-2006-0810

Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection...

CVE-2006-0809

Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...