871 matches found
CVE-2006-4606
Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the 1 idtemas parameter in busquedatema.php, the 2 cadena parameter in busqueda.php, the 3 idautor parameter in autor.php, the 4 email parameter in lista.php, an...
revista112.txt
Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------------------ Revista 1.1.2 http://php-revista.sourceforge.org ------------------------------------------------------------------------------------ Revista is a simple spanish PHP...
CVE-2006-4608
Multiple cross-site scripting XSS vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 cadena parameter in busqueda.php and the 2 email parameter in lista.php...
CVE-2006-4606
CVE-2006-4606 affects Longino Jacome’s php-Revista 1.1.2. The vulnerability involves multiple SQL injection flaws in five parameters across different PHP scripts: (1) id_temas in busqueda_tema.php, (2) cadena in busqueda.php, (3) id_autor in autor.php, (4) email in lista.php, and (5) id_articulo ...
CVE-2006-4606
Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the 1 idtemas parameter in busquedatema.php, the 2 cadena parameter in busqueda.php, the 3 idautor parameter in autor.php, the 4 email parameter in lista.php, an...
CVE-2006-4607
CVE-2006-4607 affects Longino Jacome php-Revista 1.1.2. The vulnerability is in admin/index.php, where remote attackers can bypass authentication by setting ID_ADMIN and SUPER_ADMIN to 1. The NVD entry documents an authentication bypass with this parameter manipulation. No explicit remediation is...
CVE-2006-2908
The domecode function in inc/functionspost.php in MyBulletinBoard MyBB 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a pregreplace function call with a /e executable modifier...
CVE-2006-2949
Cross-site scripting XSS vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter...
CVE-2006-2949
The CVE-2006-2949 entry concerns a cross-site scripting (XSS) vulnerability in MyBB 1.1.2, occurring in private.php via the do parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The connected documents do not provide additional technical details such as affected ...
myNewsletter 1.1.2 - 'adminLogin.asp' Authentication Bypass
KAPDA.ir --- myNewsletter change action in source and then submit www.kapda.ir milw0rm.com 2006-06-06...
myNewsletter 1.1.2 - adminLogin.asp Authentication Bypass
myNewsletter 1.1.2 - adminLogin.asp Authentication Bypass KAPDA.ir --- myNewsletter change action in source and then submit www.kapda.ir milw0rm.com 2006-06-06...
myNewsletter 1.1.2 - Username SQL Injection
myNewsletter 1.1.2 - Username SQL Injection source: https://www.securityfocus.com/bid/18287/info myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploi...
CVE-2006-2767
PHP remote file inclusion vulnerability in Ottoman 1.1.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the defaultpath parameter in 1 error.php, 2 index.php, and 3 classes/mainclass.php...
CVE-2006-2767
CVE-2006-2767 is a PHP remote file inclusion vulnerability in Ottoman 1.1.2, triggered when register_globals is enabled. The vulnerability allows an attacker to execute arbitrary PHP code via the default_path parameter in the following files: error.php, index.php, and classes/main_class.php. The ...
CVE-2005-3864
SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the cnt parameter. NOTE: various reports indicate that the affected version is 1.1.3, but as of 2005-11-29, the most recent version appears to be 1.1.2...
CVE-2005-3864
SQL injection vulnerability in SourceWell prior to or at version 1.1.2 (and conflicting reports for 1.1.3) allows remote attackers to execute arbitrary SQL commands via the cnt parameter in index.php. The issue is exploitable remotely over the network with no authentication required and can lead ...
CVE-2005-3328
PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the punroot parameter...
CVE-2005-3328
CVE-2005-3328 relates to a PHP remote file inclusion in PunBB, specifically in common.php where the pun_root parameter enables an attacker to execute arbitrary code. Affected software: PunBB 1.1.2 through 1.1.5. Underlying issue: remote code execution via user-supplied pun_root. Impact per the en...
