66 matches found
Immunity Canvas: PHPMYTOURNEY_INCLUDE
Name| phpmytourneyinclude ---|--- CVE| CVE-2007-4757 Exploit Pack| CANVAS Description| phpMytourney Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: vanta.ru CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4757 CVE Name: CVE-2007-4757...
CVE-2007-4757
PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the functionsfile parameter...
CVE-2007-4757
The vulnerability CVE-2007-4757 affects phpMytourney: a PHP remote file inclusion in menu.php allows an attacker to execute arbitrary PHP code by supplying a URL in the functions_file parameter. This is a server-side code execution risk (base CVSS 7.5, HIGH). Affected component is the menu.php in...
CVE-2006-4757
CVE-2006-4757 affects the e107 CMS version 0.7.5. The vulnerability is described as multiple SQL injection flaws in the admin section, enabling remote authenticated administrative users to execute arbitrary SQL commands via the following parameters: (1) linkopentype, (2) linkrender, (3) link_clas...
CVE-2005-4757
BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, are affected by an issue where the servlet root URL pattern (/) is not properly constrained, potentially allowing remote attackers to bypass intended protections. The vulnerability is described across multiple ...