24 matches found
EUVD-2007-2617
Malware in sbrugna...
EUVD-2007-3112
Malware in sbrugna...
EUVD-2006-5814
Malware in sbrugna...
EUVD-2008-4762
Malware in sbrugna...
EUVD-2007-2618
Malware in sbrugna...
EUVD-2007-0367
Malware in sbrugna...
EUVD-2009-4711
Malware in sbrugna...
EUVD-2007-0318
Malware in sbrugna...
EUVD-2009-3203
Malware in sbrugna...
EUVD-2006-5815
Malware in sbrugna...
All In One Control Panel 1.3.x cp_downloads.php did Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/22032/info All In One Control Panel is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
CVE-2009-4747
PHP remote file inclusion vulnerability in public/code/cphtml2xhtmlbasic.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220...
Remote file inclusion
PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2009-3220
PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2009-3220
The CVE-2009-3220 entry applies to All In One Control Panel (AIOCP) 1.4.001, where a PHP remote file inclusion vulnerability exists in cp_html2txt.php. An attacker can supply a URL in the page parameter to cause arbitrary PHP code execution on the remote host. The vulnerability is triggered throu...
CVE-2009-3220
PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2007-3120
Cross-site scripting XSS vulnerability in public/code/cpdpage.php in All In One Control Panel AIOCP before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocpdp parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in shared/code/cpfunctionsdownloads.php in Nicola Asuni All In One Control Panel AIOCP before 1.3.009 allows remote attackers to execute arbitrary SQL commands via the downloadcategory parameter...
CVE-2006-5831
PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...
CVE-2006-5830
Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topid, 2 forid, and 3 catid parameters to code/cpforumview.php; 4 choosedlanguage parameter to cpdpage.php; 5 orderdir...