u5CMS 3.9.3 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications u5CMS 3.9.3 thumb.php Local File Inclusion Vulnerability Vendor: Stefan P. Minder Product web page: http://www.yuba.ch Affected version: 3.9.3 and 3.9.2 Summary: u5CMS is a little, handy Content Management System for medium-sized websites,...

u5CMS 3.9.3 Local File Inclusion

u5CMS 3.9.3 thumb.php Local File Inclusion Vulnerability Vendor: Stefan P. Minder Product web page: http://www.yuba.ch Affected version: 3.9.3 and 3.9.2 Summary: u5CMS is a little, handy Content Management System for medium-sized websites, conference / congress / submission administration, review...

CVE-2011-5224

CVE-2011-5224 describes an SQL injection vulnerability in the WordPress Sentinel plugin, version 1.0.0. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: Sentinel plugin for WordPress (1.0.0). Root cause: unsafeguarded SQL handling in ...

CVE-2012-5224

PHP remote file inclusion vulnerability in vb/includes/vbacmpsincludebottom.php in vBadvanced CMPS 3.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pagestemplate parameter...

CVE-2010-5224

CVE-2010-5224 is an untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3. Local users can gain privileges via a hijacked dwmapi.dll placed in the current working directory, demonstrated by a directory containing a .mp3 file. The available sources consistently describe the issue...

CVE-2008-5224

CVE-2008-5224 is a Cross-site scripting (XSS) vulnerability in Kent Web Mart 1.61 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling script execution in a victim’s browser. Public sources (NVD, JVN, CVE lists) consis...

CVE-2007-5224

inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via the exifprog parameter, which is specified in an exec function call...

CVE-2007-5224

The CVE-2007-5224 entry affects Original Photo Gallery 0.11.2 and earlier. Affected file: inc/exif.inc.php; the exif_prog parameter is used inside an exec() call without proper sanitization, allowing remote attackers to execute arbitrary commands on the server. This is described in multiple sourc...

CVE-2006-5224

PHP remote file inclusion vulnerability in includes/loggerengine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5224

The CVE-2006-5224 issue is a PHP remote file inclusion vulnerability in Dimitri Seitz Security Suite IP Logger 1.0.0 (dwingmods for phpBB). The flaw occurs in includes/logger_engine.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. The c...