CVE-2009-4887

PHP remote file inclusion vulnerability in index.php in CMS S.Builder 3.7 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in a binnincludepath cookie. NOTE: this can also be leveraged to include and execute arbitrary local files...

phpGreetCards XSS Vulnerabilities

Exploit for php platform in category web applications ================================= phpGreetCards XSS Vulnerabilities ================================= :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = phpGreetCards...

CVE-2009-2178

Cross-site scripting XSS vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-2178

Cross-site scripting XSS vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-2179

CVE-2009-2179 corresponds to a SQL injection vulnerability in phpDatingClub 3.7, specifically in search.php where an attacker can manipulate the sform[day] parameter to execute arbitrary SQL commands. Multiple connected sources (NVD, OpenVAS) describe the issue and, in some entries, an additional...

CVE-2009-2178

CVE-2009-2178 is a documented cross-site scripting (XSS) vulnerability in phpDatingClub 3.7. The affected component is the application’s PHP file website.php , with exploitation possible via the page parameter to inject arbitrary web script or HTML. The vulnerability is reported in the NVD entry ...

CVE-2009-2179

SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands via the sformday parameter...

phpDatingClub 3.7 XSS / SQL Injection

phpDatingClub v 3.7ansubdepartmentsid SQL/XSS Injection Vulnerability Note: Algeria 2-0 Zambia Founder : ThE g0bL!N Home:WwW.Snakespc.CoM More info:http://www.w2b.ru/webapp.php?cat=phpDatingClub SQL Injection Vulnerability Exploit...

CMS S.Builder <= 3.7 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== CMS S.Builder = 3.7 Remote File Inclusion Vulnerability ======================================================== CMS S.Builder = 3.7 RFI Vulnerability Information: Vendor:...

CMS S.Builder 3.7 Remote File Inclusion

CMS S.Builder = 3.7 RFI Vulnerability Information: Vendor: http://www.sbuilder.ru Affected versions: 3.7 and possibly later versions Description: The engine of this cms makes site files index.php, etc with code like: --- PHP Code: if !isset$GLOBALS'binnincludepath' $GLOBALS'binnincludepath' = '';...

CVE-2009-0593

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action...

CVE-2009-0593

CVE-2009-0593 : A SQL injection in plx Auto Reminder 3.7 affects members.php (newar action). Described as exploitable by remote authenticated users via the id parameter. CVSSv2 base score 6.5 (MEDIUM). No further technical details or patch/remediation information are provided in the connected doc...

plxAutoReminder 3.7 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== plxAutoReminder 3.7 id Remote SQL Injection Vulnerability =========================================================== plx Autoreminder v3.7 id R-Sql Ynj...

plxAutoReminder 3.7 - 'id' SQL Injection

plx Autoreminder v3.7 id R-Sql Ýnj ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 04.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : EN ONEMLi N0T: demolarI hackleyen top olsun top i...

DEBIAN-CVE-2008-5376

editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...

CVE-2008-5376

editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...

CVE-2008-5376

In Crip 3.7, an local-privilege vulnerability exists: editcomment allows local users to overwrite arbitrary files through a symlink attack on a /tmp/*.tag.tmp temporary file. Root cause is improper handling of temp file creation/overwrite, enabling a symlink to redirect writes. The CVE entry note...

CVE-2002-2259

Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors...

CVE-2002-2259

CVE-2002-2259 describes a buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0, enabling local users to execute arbitrary code as root via unknown attack vectors. The public records indicate the vulnerable component is the patch used in SuSE Linux packaging f...

CVE-2005-4855

CVE-2005-4855 affects eZ publish prior to specific versions: 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922. The issue is an unrestricted file upload that does not restrict Image datatype uploads to image content types, allowing remote authenticated users to uplo...