php-addressbook v2.0 SQL Injection Vulnerbility

php-addressbook v2.0 SQL Injection Vulnerbility admin Authentication bypass Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the...

phpaddressbook-sql.txt

php-addressbook v2.0 SQL Injection Vulnerbility admin Authentication bypass Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the...

Directory traversal

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modulename parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file...

CVE-2007-1720

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modulename parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file...

PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit

No description provided by source. !Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit Vendor: http://www.sb-websoft.com/index.php?name=CmodsDownload&file=index&req=getit&lid=14 Vulnerable Code: requireonce"modules/$modulename/include/func.inc.php"; Coded by bd0rk || SOH-Crew...

CVE-2007-1720

CVE-2007-1720 affects the Addressbook 1.2 module for PHP-Nuke. Vulnerability: directory traversal via .. in the module_name parameter allows remote attackers to include and execute arbitrary local files, demonstrated by injecting PHP sequences into an Apache log file. Public exploits are listed (...

phpnuke-ab-lfi.txt

!Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit Vendor: http://www.sb-websoft.com/index.php?name=CmodsDownload&file=index&req=getit&lid=14 Vulnerable Code: requireonce"modules/$modulename/include/func.inc.php"; Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, saint, CodeR, rgo...

PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================ PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit ============================================================ !Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusi...

PHP-Nuke Module AddressBook 1.2 - Local File Inclusion

!Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit Vendor: http://www.sb-websoft.com/index.php?name=CmodsDownload&file=index&req=getit&lid=14 Vulnerable Code: requireonce"modules/$modulename/include/func.inc.php"; Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, saint, CodeR, rgo...

PHP-Nuke Module AddressBook 1.2 - Local File Inclusion

PHP-Nuke Module AddressBook 1.2 - Local File Inclusion !Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit Vendor: http://www.sb-websoft.com/index.php?name=CmodsDownload&file=index&req=getit&lid=14 Vulnerable Code: requireonce"modules/$modulename/include/func.inc.php"; Coded by bd0...

Sonium Enterprise Addressbook远程文件包含漏洞

Sonium Enterprise Addressbook是一款基于PHP的WEB地址管理程序。 Sonium Enterprise Addressbook不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是多个脚本对用户提交的'folder'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Sonium Sonium Enterprise Addressbook 0.2 http://www.sonium-php.de/...

Pearl Forums 2.4 - Multiple Remote File Inclusions

Pearl Forums 2.4 - Multiple Remote File Inclusions | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/...

Pearl Forums 2.4 Multiple Remote File Include Vulnerabilities

No description provided by source. | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/...

CVE-2006-4311

PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1Adressbuch/delete.php...

CVE-2006-3564

Multiple cross-site scripting XSS vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the email, 2 cond, or 3 name parameters to a addressbook.view.php, 4 the daysprune parameter to b index.php, 5 the datato parameter to c...

PhpGroupWare Addressbook < 0.9.16 Unspecified Flaw

The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SEC-20051211-0.txt

SEC Consult Security Advisory ========================================================================== title: program: vulnerable version: homepage: found: by: / SEC Consult / www.sec-consult.com ========================================================================== ------------------- vend...

SEC Consult SA-20051211-0 :: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook

SEC Consult Security Advisory 20051211-0 ========================================================================== title: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook program: Horde Application Framework + Modules vulnerable version:...

CVE-2005-4164

SQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4164

CVE-2005-4164 is a SQL injection vulnerability in the view.php component of PHP-addressbook 1.2. An attacker can submit a crafted id parameter to remote-execute arbitrary SQL commands, with impact described as partial confidentiality, integrity, and availability. The NVD entry lists a base score ...