Remote file inclusion

PHP remote file inclusion vulnerability in admin/frontpageright.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542...

Directory traversal

Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selectedprovider parameter...

CVE-2007-6614

CVE-2007-6614 : PHP remote file inclusion in Agares Media phpAutoVideo 2.21. The vulnerability affects the admin/frontpage_right.php script and allows remote attackers to execute arbitrary PHP code via a URL supplied to the loadadminpage parameter. This is described as related to CVE-2007-6542. N...

CVE-2007-6615

Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selectedprovider parameter...

Agares PhpAutoVideo 2.21 Remote/Local File Inclusion Vulnerabilities

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

PHP JackKnife 2.21 - (PHPJK) UserAreaAuthenticate.php?sUName Cross-Site Scripting

PHP JackKnife 2.21 - PHPJK UserAreaAuthenticate.php?sUName Cross-Site Scripting source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an...

Directory traversal

Directory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions including 3.0, allows remote attackers to read arbitrary files via a .. dot dot in the fn1 parameter...

cattadoc-disclose.txt

cattaDoc 2.21download2.php fn1Remote File Disclosure Vulnerability D.Script: http://cattadoc.com/download/cattadoc-2.21.tgz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group V.Code: $tp = $REQUEST'mtp'; $ofn =...

cattaDoc 2.21 - 'download2.php?fn1' Remote File Disclosure

cattaDoc 2.21download2.php fn1Remote File Disclosure Vulnerability D.Script: http://cattadoc.com/download/cattadoc-2.21.tgz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group V.Code: $tp = $REQUEST'mtp'; $ofn =...

cattaDoc 2.21 (download2.php fn1) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== cattaDoc 2.21 download2.php fn1 Remote File Disclosure Vulnerability ====================================================================== cattaDoc 2.21download2.php...

banex.txt

Discovered by Sirdarckcat from elhacker.net Banex 2.21 http://sourceforge.net/projects/banex ============================================== Banex is a simple script for sharing Banners through multiple webs. Anyway it has multiple vulnerabilities. ============================================== 1....

CVE-2006-3963

Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the 1 sitename parameter to a signup.php, and the 2 id, 3 deleteuserbanner, 4 viewmem, 5 viewmemunb, 6 viewunmem,or 7 deleteuser parameters to b admin.php...

CVE-2006-1292

Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in the phpicalendarcookielanguage and phpicalendarcookiestyle cookies, as...

CVE-2005-4239

The connected documents confirm CVE-2005-4239 is an XSS vulnerability in PHP JackKnife (2.21 and earlier) affecting Search/DisplayResults.php via URL-encoded sKeywords. Exploitation details are not expanded beyond the provided description; no explicit patch/version remediation is documented in th...

CVE-2005-3138

Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set...

CVE-2005-0877

Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq...

PT-2005-1905 · Dnsmasq · Dnsmasq

Name of the Vulnerable Software and Affected Versions: Dnsmasq versions prior to 2.21 Description: The issue allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq. Recommendations: For versions prior to 2.21, update to version 2.21 or later to resolv...

CVE-2003-0899

CVE-2003-0899 describes a buffer overflow in thttpd (defang in libhttpd.c) affecting versions 2.21 to 2.23b1. The overflow can be triggered by requests containing ‘’ that are expanded to “”, enabling remote code execution. Connected sources (SUSE, Debian, OpenVAS, and NVD listing) confirm the vul...

PT-2003-1946 · Thttpd · Thttpd

Name of the Vulnerable Software and Affected Versions: thttpd versions 2.21 through 2.23b1 Description: A buffer overflow issue exists in the defang function within libhttpd.c, allowing remote attackers to execute arbitrary code. This occurs when requests containing '' characters are processed,...