CVE-2010-3307

CVE-2010-3307 involves multiple PHP remote file inclusion vulnerabilities in the Free Simple CMS 1.0 (and earlier). The issue arises in the themes/default/index.php file, where a URL provided in the following parameters can be used to include remote code: body, footer, header, menu_left, and menu...

CVE-2010-3307

creationtimestamp| type| source ---|---|--- 2010-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14672...

CVE-2009-3307

CVE-2009-3307 affects FSphp 0.2.1 and involves multiple PHP remote file inclusion vulnerabilities. The root cause is insecure handling of the FSPHP_LIB URL parameter in three files (lib/ FSphp.php, navigation.php, and pathwrite.php), allowing remote attackers to include arbitrary PHP code. The NV...

CVE-2009-3307

creationtimestamp| type| source ---|---|--- 2009-09-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9720...

CVE-2008-3307

CVE-2008-3307 is a SQL injection vulnerability affecting the C. Desseno YouTube Blog (ytb) 0.1 in the todos.php module. The vulnerability is triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. This is a distinct vector from CVE-2008-3306. Connected sources...

CVE-2008-3307

creationtimestamp| type| source ---|---|--- 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6117...

CVE-2007-3307

CVE-2007-3307 describes a SQL injection vulnerability in the web component of Solar Empire (game_listing.php) affecting version 2.9.1.1 and earlier. The issue allows remote attackers to execute arbitrary SQL commands by sending a crafted value in the User-Agent HTTP header. The vulnerability impa...

CVE-2007-3307

SQL injection vulnerability in gamelisting.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2005-3307

Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via ".." sequences in the 1 user parameter in a profile operation or 2 quale parameter in a newtopic operation...

CVE-2005-3307

CVE-2005-3307 affects FlatNuke 2.5.6. A directory traversal in index.php allows remote attackers to read arbitrary files via .. sequences in the user parameter (profile) or quale parameter (newtopic). Exploitation is remote and requires no authentication. A related Nessus entry implies a fixed ve...