CVE-2008-0279

The CVE-2008-0279 entry describes an SQL injection vulnerability in liretopic.php of Xforum 1.4 (and possibly other versions) that allows remote attackers to execute arbitrary SQL commands via the topic parameter (with the categorie parameter potentially affected). Root cause is improper input ha...

Xforum 1.4 (topic) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Xforum 1.4 Remote SQL Injection desc: Un forum php/MySQL, avec gestion complete des membres et des messages download: http://www.comscripts.com/scripts/php.xforum.1188.html d0rk: "xforum 1.4" bug found by j0j0 c0ded by j0j0 liretopic.php 68. $conn...

Xforum 1.4 - topic SQL Injection

Xforum 1.4 - topic SQL Injection !/usr/bin/perl Xforum 1.4 Remote SQL Injection desc: Un forum php/MySQL, avec gestion complete des membres et des messages download: http://www.comscripts.com/scripts/php.xforum.1188.html d0rk: "xforum 1.4" bug found by j0j0 c0ded by j0j0 liretopic.php 68. $conn =...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2007-6655

PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2007-6655

The provided sources identify CVE-2007-6655 as a PHP remote file inclusion vulnerability in Kontakt Formular 1.4. The flaw affects the includes/function.php component, allowing an attacker to supply a URL via the root_path parameter to execute arbitrary PHP code on the server. The vulnerability i...

Kontakt Formular 1.4 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== Kontakt Formular 1.4 Remote File Inclusion Vulnerability ======================================================== ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + +...

kontakt formular 1.4 - Remote File Inclusion

kontakt formular 1.4 - Remote File Inclusion ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Kontakt Formular 1.4 Remote File Inclusion Vulnerability + + + + Discovered by bd0rk + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Vendor: http://www.mapos-scripts....

MatPo.de Kontakt Formular 1.4 - 'function.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/27075/info Kontakt Formular is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks ar...

CVE-2007-6485

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...

oreon-rfi.txt

By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file is: ./oreon-1.4/www/include/monitoring/engine/MakeXML.php Another,virtuall...

CVE-2007-6292

SQL injection vulnerability in leggicommenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6292

CVE-2007-6292: SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary SQL via the id parameter. Affected software: MWOpen 1.4 and earlier. Root cause: improper handling of user-supplied id value in the SQL query. Impact: potential ...

JBoss HSQLDB component remote command injection

Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to 1 TCP port 1701 in JBoss 3.2.1, a...

CVE-2007-6171

SQL injection vulnerability in the Postgres Realtime Engine resconfigpgsql in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in the Call Detail Record Postgres logging engine cdrpgsql in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via 1 ANI and 2 DNIS arguments...

CVE-2007-6171

SQL injection vulnerability in the Postgres Realtime Engine resconfigpgsql in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Directory traversal

Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter...

CVE-2007-6086

CVE-2007-6086 is a directory-traversal vulnerability in VigileCMS 1.4. The issue occurs in index.php where directory traversal sequences in the module parameter allow remote attackers to include and execute arbitrary local files. This leads to arbitrary code execution and partial/complete comprom...

CVE-2007-6085

CVE-2007-6085 relates to multiple cross-site scripting (XSS) flaws in VigileCMS 1.4 affecting index.php, where an attacker can inject arbitrary script/HTML through the message field in the vedipm or live_chat modules. Impact is described as partial integrity impact with no confidentiality or avai...