CVE-2008-6586

The CVE-2008-6586 entry documents a Cross-site request forgery (CSRF) vulnerability in the gui/index.php of µTorrent (uTorrent) WebUI 0.315. The vulnerability allows an attacker to hijack the authentication of users for requests that trigger the download of arbitrary torrent files via the add-url...

CVE-2008-6586

creationtimestamp| type| source ---|---|--- 2008-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31672...

CVE-2007-6586

CVE-2007-6586 is a SQL injection in nicLOR-CMS (sezione_news.php) that allows remote attackers to inject arbitrary SQL via the id parameter in a sezione page action to index.php. Affected: nicLOR-CMS, sezione_news.php; impact per sources is partial confidentiality/integrity/availability. Exploit ...

CVE-2006-6586

Multiple PHP remote file inclusion vulnerabilities in Vortex Blog vBlog, aka C12 a0.1nonfunc allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter in 1 secure.php or 2 checklogin.php in admin/auth/...

CVE-2006-6586

Vulnerability: CVE-2006-6586 affects Vortex Blog (vBlog, aka C12) - a0.1_nonfunc. Root cause: multiple PHP remote file inclusion via the cfgProgDir parameter in admin/auth/secure.php and admin/auth/checklogin.php. Impact: allows remote attackers to execute arbitrary PHP code on affected systems (...