Article System 0.6 (volume.php) Remote File Include Vulnerability

No description provided by source. Coding 4 Fun c4f.pl Article System 0.6 ; Class = Remote File Inclusion ; Download = http://sourceforge.net/project/showfiles.php?groupid=49971&packageid=43403&releaseid=325871 ; Found by = GregStar gregstaratc4fdotpl ;...

Article System 0.6 - 'volume.php' Remote File Inclusion

Coding 4 Fun c4f.pl Article System 0.6 ; Class = Remote File Inclusion ; Download = http://sourceforge.net/project/showfiles.php?groupid=49971&packageid=43403&releaseid=325871 ; Found by = GregStar gregstaratc4fdotpl ;...

CVE-2006-5383

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...

CVE-2006-5383

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...

CVE-2006-5383: Undefined Security Weakness

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...

Small ficus WIS vulnerability of supplementary articles and use article-vulnerability warning-the black bar safety net

: Yesterday I saw ALLyeSNO of this article, but always do not understand the original text that the meaning of the Until today...... Vulnerability found by : ALLyeSNO http://blog.csdn.net/freexploit/ WIS is a small ficus the development of the SQL vulnerability scanning tools WIS on the&character...

CVE-2006-4768

Multiple direct static code injection vulnerabilities in addgo.php in Stefan Ernst Newsscript aka WM-News 0.5 beta allow remote attackers to execute arbitrary PHP code via the 1 description, 2 issue, 3 title, 4 var, 5 name, 6 keywords, and 7 note parameters, which are stored in an article file...

CVE-2006-4714

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...

CVE-2006-4715

SQL injection vulnerability in pdfversion.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4714

The CVE-2006-4714 entry describes a PHP remote file inclusion in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL supplied to the classified_path parameter in index.php. Affect...

CVE-2006-4715

SQL injection vulnerability in pdfversion.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4714

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...

CVE-2006-4715

CVE-2006-4715 : A SQL injection vulnerability in pdf_version.php affects SpoonLabs Vivvo Article Management CMS (aka phpWordPress)

phpWordPress (Vivvo Article Manager)

MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in HTMLfunction.php function HTMLCategoryMenu : line 51: includeonce$classifiedpath.'exportcategory.php'; if registerglobals = On then this code can include...

phpWordPress (Vivvo Article Manager)

MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid"; securesql function doesn't block all sql injection...

CVE-2006-4714: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...

CVE-2006-4715: Undefined Security Weakness

SQL injection vulnerability in pdfversion.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Vivvo Article Manager <= 3.2 (id) Remote SQL Injection Vulnerability

No description provided by source. MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid"; securesql...

Vivvo Article Manager <= 3.2 (classified_path) File Include Vulnerability

No description provided by source. MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in HTMLfunction.php function HTMLCategoryMenu : line 51: includeonce$classifiedpath.'exportcategory.php'; if registerglobals ...

Vivvo Article Manager 3.2 - classified_path File Inclusion

Vivvo Article Manager 3.2 - classifiedpath File Inclusion MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in HTMLfunction.php function HTMLCategoryMenu : line 51:...