123 matches found
CVE-2006-6765
The CVE-2006-6765 entry describes multiple PHP file inclusion vulnerabilities in Pagetool 1.07, specifically in src/admin/pt_upload.php. The underlying issues allow remote attackers to execute arbitrary PHP code by supplying (1) a local filename or FTP/share URI via config_file, or (2) a URL via ...
CVE-2006-6765
Multiple PHP file inclusion vulnerabilities in src/admin/ptupload.php in Pagetool 1.07 allow remote attackers to execute arbitrary PHP code via 1 a local filename or FTP/share URI in the configfile parameter or 2 a URL in the ptconfsrc parameter...
CVE-2006-3796
DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character, which allows remote authenticated users to login as the "space" user, post as the guest user, and block the ability of an administrator to ban the "space" user...
CVE-2006-3797
SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the 1 memberpw and 2 membercookie cookies...
CVE-2006-3798
DeluxeBB 1.07 and earlier allows remote attackers to overwrite the 1 GET, 2 POST, 3 ENV, and 4 SERVER variables via the COOKIE aka COOKIE variable, which can overwrite the other variables during an extract function call, probably leading to multiple security vulnerabilities, aka "pollution of the...
CVE-2006-3798
DeluxeBB 1.07 and earlier exposes a vulnerability where a remote attacker can set the COOKIE data to overwrite the internal variables _GET, _POST, _ENV, and _SERVER during an extract function call, resulting in pollution of the global namespace and potentially multiple security vulnerabilities. A...
CVE-2006-3799
DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms via the login variable and certain other variables, by using lowercase "union select" or possibly other statements that do not match the uppercase "UNION SELECT."...
CVE-2006-3304
SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn parameter...
CVE-2006-3303
DeluxeBB 1.07 and earlier have cross-site scripting in pm.php, exploitable via the subject or to parameters, enabling injection of arbitrary script/HTML. Root cause: improper input handling in pm.php leading to reflected XSS. Impact per available data is partial integrity impact with no confident...
DeluxeBB 1.07 Create admin Exploit
DeluxeBB 1.07 Create admin Exploit ---------------------------------------- + Summary : Name : DeluxeBB 1.07 Class : Remote Risk : High + Description: DeluxeBB 1.07 Have a high Security Bug in user control panel cp.php . this bug allows to users change access level with inject qurry in update...
DeluxeBB <= 1.07 (cp.php) Create Admin Exploit
No description provided by source. !/usr/bin/perl DeluxeBB = 1.07 Create Admin Exploit www.h4ckerz.com / www.hackerz.ir / www.aria-security.net ./2006-6-25 Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV...
HeffnerCMS Remote Command Exucetion And Cross Scripting Attack
Website : http://www.christian-heffner.de Version : 1.07 I. ?php $filename="index.php"; requireonce 'vlib/vlibTemplate.php'; $tmpl = new vlibTemplate'tmpl/std/index.tpl'; requireonce 'config/dbconfig.php'; requireonce 'config/pcfunctions.php'; Ucuyor.... : lol II. Vulnerable code ;...
CA Multiple Products Message Queuing Multiple Remote Vulnerabilities
The remote version of CA Message Queuing Service contains a stack overflow in the 'logsecurity' function that may allow an attacker to execute arbitrary code on the remote host. This version is also prone to denial of service on the TCP port 4105 as well as arbitrary code execution through spoofe...
CVE-2004-2128
CVE-2004-2128 concerns a cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 . According to the CVE records, the issue allows remote attackers to execute arbitrary script as other users by crafting a malicious query string to ISAPISkeleton.dll . The vulnerability is described across mu...
Endless loop in Halo 1.06
Luigi Auriemma Application: Halo: Combat Evolved http://www.microsoft.com/games/pc/halo.aspx Versions: = 1.06 and Custom Edition 1.00 Platforms: Windows Bug: endless loop Exploitation: remote, versus server Date: 24 May 2005 Author: Luigi Auriemma e-mail: [email protected] web:...
Gearbox Software Halo Game Server 1.06/1.07 - Infinite Loop Denial of Service
source: https://www.securityfocus.com/bid/13728/info The Halo Game Server is prone to a denial-of-service condition. The issue arises when malformed data is sent to the game server, causing it to enter an infinite loop. This issue was reported to affect Halo Game Server 1.06; earlier versions are...
wfsections107.txt
Program: wfsections Verion: 1.07 Bug Type: SQL Injection Bug Discription: ================================= In file class/wfsfiles.php, we can see this function: //START function getAllbyArticle$articleid $db =& Database::getInstance; $table = $db-prefix"wfsfiles"; $ret = array; $sql = "SELECT FR...
CVE-2005-0725
CVE-2005-0725 describes an SQL injection in the WF-Sections (wfsections) 1.07 module. The vulnerability exists in the getAllbyArticle function of wfsfiles.php and allows remote attackers to inject arbitrary SQL through the articleid parameter to article.php. Multiple connected records corroborate...
Wfsection 1.07 vulnerabilities
Program: wfsections Verion: 1.07 Bug Type: SQL Injection Bug Discription: ================================= In file class/wfsfiles.php, we can see this function: //START function getAllbyArticle$articleid $db =& Database::getInstance; $table = $db-prefix"wfsfiles"; $ret = array; $sql = "SELECT FR...
wfsections 1.07 advisory
Program: wfsections Verion: 1.07 Bug Type: SQL Injection Bug Discription: ================================= In file class/wfsfiles.php, we can see this function: //START function getAllbyArticle$articleid $db =& Database::getInstance; $table = $db-prefix"wfsfiles"; $ret = array; $sql = "SELECT FR...