CVE-2008-1961

Voice Of Web AllMyGuests 0.4.1 is affected by CVE-2008-1961: an SQL injection in index.php allows remote attackers to execute arbitrary SQL via the AMG_id parameter in the comments action. Root cause: unsanitized AMG_id input in comments processing leads to query manipulation. No remediation deta...

CVE-2008-1961

SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMGid parameter in a comments action...

amg-sql.txt

Found by : -=Player=- Contacts : 282-246-419 ICQ Greatz to: LidlosesAuge, Suicide, enco, Free-Hack Script : AllMyGuests Site : http://www.php-resource.net/ Dork : "powered by AllMyGuests" Valnu : index.php Parameter: AMGid Injection:...

AllMyGuests <= 0.4.1 (AMG_id) Remote SQL Injection Vulnerability

No description provided by source. Found by : -=Player=- Contacts : 282-246-419 ICQ Greatz to: LidlosesAuge, Suicide, enco, Free-Hack Script : AllMyGuests Site : http://www.php-resource.net/ Dork : "powered by AllMyGuests" Valnu : index.php Parameter: AMGid Injection:...

AllMyGuests 0.4.1 - AMG_id SQL Injection

AllMyGuests 0.4.1 - AMGid SQL Injection Found by : -=Player=- Contacts : 282-246-419 ICQ Greatz to: LidlosesAuge, Suicide, enco, Free-Hack Script : AllMyGuests Site : http://www.php-resource.net/ Dork : "powered by AllMyGuests" Valnu : index.php Parameter: AMGid Injection:...

AllMyGuests 0.4.1 - 'AMG_id' SQL Injection

Found by : -=Player=- Contacts : 282-246-419 ICQ Greatz to: LidlosesAuge, Suicide, enco, Free-Hack Script : AllMyGuests Site : http://www.php-resource.net/ Dork : "powered by AllMyGuests" Valnu : index.php Parameter: AMGid Injection:...

AllMyGuests <= 0.4.1 (AMG_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ AllMyGuests = 0.4.1 AMGid Remote SQL Injection Vulnerability ================================================================ Found by : -=Player=- Greatz to: LidlosesAuge,...

AllMyGuests远程文件包含漏洞

AllMyGuests是一款基于PHP的WEB应用程序。 AllMyGuests不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'AMGserverpath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 AllMyPHP AllMyGuests 0.3 目前没有解决方案提供： http://www.php-resource.net/content-12.html http://example.com/include/submit.inc.php?AMGserverpath=attacker's...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGserverpath parameter to 1 comments.php and 2 signin.php; and possibly via a URL in unspecified parameters to 3 include/submit.inc.php, 4...

CVE-2007-0172

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGserverpath parameter to 1 comments.php and 2 signin.php; and possibly via a URL in unspecified parameters to 3 include/submit.inc.php, 4...

CVE-2007-0172

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGserverpath parameter to 1 comments.php and 2 signin.php; and possibly via a URL in unspecified parameters to 3 include/submit.inc.php, 4...

PT-2007-1656 · Unknown · Allmyguests

Name of the Vulnerable Software and Affected Versions: AllMyGuests versions 0.3.0 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the AMG serverpath parameter to various PHP files, including "comments.php" and "signin.php", and possibly via a...

CVE-2007-0172

CVE-2007-0172 concerns AllMyGuests 0.3.0 and earlier. Concrete details in connected docs show multiple PHP remote file inclusion vulnerabilities triggered by the AMG_serverpath parameter, enabling an attacker to execute arbitrary PHP code via (1) comments.php and (2) signin.php, and possibly via ...

AllMyGuests &lt;= 0.3.0 (AMG_serverpath) Remote Inclusion Vulnerabilities

No description provided by source. AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php /include/cmsubmit.inc.php...

AllMyGuests 3.0 Remote File Inclusion Vulnerability

AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php /include/cmsubmit.inc.php /comments.php /index.php /signin.php Risk:...

AllMyGuests 0.3.0 - 'AMG_serverpath' Remote File Inclusion

AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php /include/cmsubmit.inc.php /comments.php /index.php /signin.php Risk:...

AllMyGuests 0.3.0 - AMG_serverpath Remote File Inclusion

AllMyGuests 0.3.0 - AMGserverpath Remote File Inclusion AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php...

AllMyGuests <= 0.3.0 (AMG_serverpath) Remote Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== AllMyGuests = 0.3.0 AMGserverpath Remote Inclusion Vulnerabilities ====================================================================== Software: AllMyGuests Version:...

CVE-2006-4993

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGconfigcfgserverpath parameter in 1 modules/AllMyGuests/signin.php aka the Nuke module and 2 AllMyGuests/signin.php aka the standalone...

CVE-2006-4993

AllMyGuests 0.4.1 and earlier are affected by multiple PHP remote file inclusion vulnerabilities. An attacker can trigger code execution by supplying a URL in the _AMGconfig[cfg_serverpath] parameter in (1) modules/AllMyGuests/signin.php and (2) AllMyGuests/signin.php (standalone). The issue stem...