CVE-2006-5832

All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to 1 public/code/cpdpage.php, possibly involving the aiocpdp parameter, 2 public/code/cpshowecproducts.php, possibly involving the orderfield parameter, and 3...

CVE-2006-5832

All In One Control Panel (AIOCP)

CVE-2006-5831

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...

CVE-2006-5830: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topid, 2 forid, and 3 catid parameters to code/cpforumview.php; 4 choosedlanguage parameter to cpdpage.php; 5 orderdir...

CVE-2006-5829: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 choosedlanguage parameter to a cpdpage.php, b cpnews.php, c cpforumview.php, d cpedituser.php, e cpnewsletter.php, f cplinks.php, g...

CVE-2006-5831: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...

CVE-2006-5832: Undefined Security Weakness

All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to 1 public/code/cpdpage.php, possibly involving the aiocpdp parameter, 2 public/code/cpshowecproducts.php, possibly involving the orderfield parameter, and 3...

beautifier.txt

ToXiC beautifier: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: beautifier Source Code: http://www.beautifier.org/php/beautifier-php-full-current.tar.gz Page: HFilexhtml11.php Problem: requireonce"$BEAUTPATH/Beautifier/HFile.php"; Dir :...

Mdweb132-postgres.txt

ToXiC Mdweb132-postgres: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: Mdweb132-postgres Sorce Code: http://jc.desconnets.free.fr/mdweb/install/windows/mdweb132-postgres-s ans-installeur.zip Page: formorg.inc.php countryinsert.php Problem...

Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users

Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i;...

Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit

Exploit for unknown platform in category web applications ==================================================================== Flatnuke 2.5.8 userlang Local Inclusion / Delete All Users Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=o...

Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Flatnuke 2.5.8 "userlang" arbitrary local inclusion/delete all users exploit by rgod [email protected] site: http://retrogod.altervista.o...

Flatnuke 2.5.8 - 'userlang' Local Inclusion / Delete All Users

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="...

PHPSecurePages 0.28b - 'secure.php' Remote File Inclusion

============================================================================================== phpsecurepages cfgProgDir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous Download from :...

Minerva <= v238 (phpbb_root_path) Remote File Inclusion Exploit

============================================================================================== Minerva = v238 phpbbrootpath Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

Minerva 2.0.21 build 238a - phpbb_root_path File Inclusion

Minerva 2.0.21 build 238a - phpbbrootpath File Inclusion ============================================================================================== Minerva = v238 phpbbrootpath Remote File Inclusion Exploit...

[Full-disclosure] DotNetNuke HTML Code Injection

Security Advisory: VULN20-09-2006 - http://www.secureshapes.com/advisories/vuln20-09-2006.htm Vendor Security Bulletin: http://dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletin no3/tabid/990/Default.aspx DotNetNuke - HTML Code Injection Vulnerability Date: 20/09/2006 Severity:...

CVE-2006-4864

PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...

CVE-2006-4864

PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...

CVE-2006-4864

The CVE-2006-4864 vulnerability affects All Enthusiast’s ReviewPost 2.5, where index.php allows a remote attacker to execute arbitrary PHP code via a URL in the RP_PATH parameter (a remote file inclusion issue). The referenced PT-2006-5618 entry confirms the vulnerable software/version and descri...