1234 matches found
pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion
PafileDB Remote File InclusionphpBB Contact : irc.gigachat.net ir4dex & [email protected] Risk : High Class : Remote Script : pafileDB Version : not specified --------------------------------------------------------------------- Vulnerable code : $linklanguage = 'langenglish'; include...
CVE-2006-2033
CoreNews risk (CVE-2006-2033): A PHP remote file inclusion vulnerability affecting Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. This is described as a distinct vector from CVE-2006-1212. Affected: CoreNews 2.0.1 and earlie...
Sql injection
SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter...
CVE-2006-1666
SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter...
CVE-2006-1666
SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter...
CVE-2006-1666
CVE-2006-1666 describes a SQL injection vulnerability in the forum.php component of Arab Portal 2.0.1 stable. The issue allows remote attackers to inject and execute arbitrary SQL commands through the mineID parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH), with network attack ve...
CVE-2006-1665
Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the 1 adminJump and 2 forummiddle parameters in a forum.php, and the 3 form parameter in b members.php, c pm.php, and d mail.php...
CVE-2006-1212
CVE-2006-1212 concerns Core CoreNews 2.0.1 where an issue in index.php allegedly allows remote command execution via a page parameter, possibly via a PHP remote file include vulnerability; however, source inspection could not confirm the presence of a page parameter in CoreNews 2.0.1. The connect...
CVE-2006-1212
Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include vulnerability. NOTE: this vulnerability could not be confirmed by source code inspection of CoreNews 2.0.1, which...
CoreNews 2.0.1 Remote Command Exucetion
Webpage : www.coreslawn.de Risk : high Code : http://www.example.com/index.php?page=evilcode?&cmd=id For Patriotic Hackers Freedom For Ocalan irc.gigachat.net kurdhack...
DEBIAN-CVE-2006-0986
WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 default-filters.php, 2 template-loader.php, 3 rss-functions.php, 4 locale.php, 5 wp-db.php, and 6 kses.php in the wp-includes/ directory; and 7 edit-form-advanced.php, 8...
WordPress <= 2.0.1 - Multiple Vulnerabilities
Because of these vulnerabilities, attackers can obtain sensitive information via a direct request. Solution Update the WordPress to the latest available version at least 2.0.2...
CVE-2006-0888
The CVE-2006-0888 entry concerns Invision Power Board (IPB) 2.0.1, where index.php with Code Confirmation disabled can lead to a denial of service by registering a large number of users. The vulnerability is triggered via a user-registration flood, but the public documents do not specify exact te...
CVE-2006-0755
DotProject, versions ≤2.0.1, contains multiple PHP remote file inclusion vulnerabilities exploitable when register_globals is enabled. The baseDir parameter in (1) db_adodb.php, (2) db_connect.php, (3) session.php, (4) vw_usr_roles.php, (5) calendar.php, (6) date_format.php, (7) tasks/gantt.php a...
CVE-2006-0756
dotProject 2.0.1 and earlier leaves 1 phpinfo.php and 2 check.php accessible under the /docs/ directory after installation, which allows remote attackers to obtain sensitive configuration information. NOTE: the vendor disputes this issue, saying that it could only occur if the administrator ignor...
Design/Logic Flaw
unixrandom.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys...
CVE-2006-0353
unixrandom.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys...
CVE-2006-0353
unixrandom.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys...
CVE-2005-3967
Cross-site scripting XSS vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter...
