PHP Autos 2.9.1 (searchresults.php catid) SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHP Auto's V2.9.1 searchresults.php catid http://www.phpautos.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

PHP Autos 2.9.1 - catid SQL Injection

PHP Autos 2.9.1 - catid SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHP Auto's V2.9.1 searchresults.php catid http://www.phpautos.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

PHP Autos 2.9.1 - 'catid' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHP Auto's V2.9.1 searchresults.php catid http://www.phpautos.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

Gentoo Security Advisory GLSA 200411-24 (BNC)

The remote host is missing updates announced in advisory GLSA 200411-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

CVE-2006-6958

Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter to 1 teamadmin.php, 2 rssadmin.php, 3 manualadmin.php, and 4 forumadmin.php in includes/rootmodules/, a different set of vecto...

CVE-2006-6958

CVE-2006-6958 : Affects PhpBlueDragon CMS 2.9.1. Multiple PHP remote file inclusion vectors exist through the vsDragonRootPath parameter to includes/root_modules/ (team_admin.php, rss_admin.php, manual_admin.php, forum_admin.php). The underlying issue is improper handling of local/remote URLs in ...

CVE-2006-5117

phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files...

CVE-2006-4960

The CVE-2006-4960 entry describes a cross-site scripting (XSS) vulnerability in Php Blue Dragon 2.9.1 and earlier, exploitable via the m parameter. The issue is reflected in an error message generated by a failed SQL query, indicating that user-supplied input can be echoed back to the browser in ...

CVE-2006-3076

CVE-2006-3076 affects PhpBlueDragon CMS 2.9.1. Affected file: software_upload/public_includes/pub_templates/vphptree/template.php. Vulnerability: remote attacker can execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, enabling remote code execution. Connected documents confirm...

PHP Blue Dragon CMS 2.9.1 - 'template.php' File Inclusion

----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...