PHP-Update 2.7 - extract() Authentication Bypass Shell Injection

PHP-Update 2.7 - extract Authentication Bypass Shell Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont+...

OpenBSD 2.6 / 2.7ftpd Remote Exploit

No description provided by source. / h0h0h0 0-day k0d3z Exploit by Scrippie, help by dvorak and jimjones greets to sk8 Not fully developt exploit but it works most of the time ; Things to add: - automatic writeable directory finding - syn-scan option to do mass-scanning - worm capabilities? shoul...

Debian DSA-910-1 : zope.2.7 - design error

A vulnerability has been discovered in zope 2.7, an Open Source web application server, that allows remote attackers to insert arbitrary files via include directives in reStructuredText functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2006-1841

Cross-site scripting XSS vulnerability in search.php in boastMachine bMachine 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-1094

SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-1097

Multiple cross-site scripting XSS vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-1094

CVE-2006-1094 affects Woltlab Burning Board; the OpenVAS/NVD entries describe a SQL injection in the Database module. The vulnerable component is the Database module’s handling of the fileid parameter in info_db.php (and related database.php), which can allow remote SQL injection. The documents d...

CVE-2006-1097

The CVE-2006-1097 applies to Woltlab Burning Board’s Datenbank MOD 2.7 and earlier. The vulnerability is a cross-site scripting (XSS) flaw triggered via the fileid parameter in either info_db.php or database.php, allowing remote attackers to inject arbitrary scripts/HTML. The root cause is improp...

CVE-2006-1094

SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-0980

CVE-2006-0980 concerns multiple XSS vulnerabilities in Jay Eckles CGI Calendar 2.7. The flaws allow an attacker to inject arbitrary web script or HTML via the year parameter in the scripts index.cgi and viewday.cgi. Affected component: CGI Calendar 2.7; entry points: index.cgi and viewday.cgi; ve...

CVE-2005-4403

SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2005-4403

SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2005-4403

SQL injection vulnerability in index.php of Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter. Affected software: Marwel (version 2.7 and earlier). Underlying issue: unsafeguarded SQL construction via user-supplied show parameter. CVSS details...

Marwel 2.7 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15959/info Marwel is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

DSA-910-1 zope2.7 - design error

Bulletin has no description...

CVE-2002-2193

CVE-2002-2193 describes a cross-site scripting (XSS) vulnerability in Mojo Mail 2.7, specifically in the mojo.cgi component. The flaw allows remote attackers to inject arbitrary web script via the email parameter. Documented impact is limited to partial integrity impact and does not indicate user...

CVE-2002-2193

Cross-site scripting XSS vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web script via the email parameter...

CVE-2005-3572

SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter...

CVE-2005-3572

Summary: CVE-2005-3572 is a SQL injection in the Peel CMS, affecting index.php for Peel versions 2.6–2.7, where the rubid parameter can be used by remote attackers to execute arbitrary SQL commands. Related entries (e.g., CVE-2008-6892 and mirrors in CVE/CVELIST records) reference Peel 3.x (such ...