CVE-2007-0601

common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences URL encoded double quotes and other potentially dangerous manipulations by sending a cookie, which bypasses the blacklist matching against the GET and PUT superglobal arrays...

CVE-2007-0596

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

Sql injection

SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cookie to forum.php...

Buffer overflow

Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as copying arbitrary files using index/commonactions.php, via vectors associated with extract operations on th...

Remote file inclusion

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

CVE-2007-0597

Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message...

CVE-2007-0599

Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as copying arbitrary files using index/commonactions.php, via vectors associated with extract operations on th...

CVE-2007-0598

The CVE-2007-0598 issue affects Aztek Forum 4.00, specifically the forum/load.php component. The vulnerability arises from improper handling of the fid cookie by forum.php, enabling remote attackers to inject and execute arbitrary SQL commands via the cookie value. The NVD entry notes a high seve...

CVE-2007-0601

CVE-2007-0601 affects Aztek Forum 4.00 where common/safety.php bypasses blacklist matching against GET/PUT by abusing a URL-encoded cookie (%22 for 2) to manipulate data. This is a network‑level issue with low attack complexity and no authentication required, potentially impacting confidentialit...

CVE-2007-0596

CVE-2007-0596 affects Aztek Forum 4.00. The vulnerability is a PHP remote file inclusion in index/main.php, exploitable via a URL in the PF[top_url] parameter. It can allow remote authenticated administrators to execute arbitrary PHP code. The connected documents provide no explicit remediation o...

CVE-2007-0601

common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences URL encoded double quotes and other potentially dangerous manipulations by sending a cookie, which bypasses the blacklist matching against the GET and PUT superglobal arrays...

CVE-2007-0597

The CVE-2007-0597 entry affects Aztek Forum 4.00. Affected component: forum.php handling for fid=XD. Root cause: error messages disclose the path, enabling information disclosure. Impact: sensitive internal path information is exposed to remote attackers. Exploitation status/details are not provi...

CVE-2007-0599

CVE-2007-0599 affects Aztek Forum 4.00 and represents a variable overwrite vulnerability in common/config.php. The issue allows remote attackers to overwrite arbitrary program variables and perform other unauthorized actions, such as copying arbitrary files, by abusing extract operations on the P...

CVE-2007-0598

SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cookie to forum.php...

CVE-2007-0596

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

Aztek Forum 4.1 Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php AztekForum4.1MultipleVulnerabilitiesExploit header================================================== sploitOwner-root statusTryingtoregisteranewuser sploitLogin/Password-phpsploit8435 statusTryingtogetdatabaseinformations...

Aztek Forum 4.0 Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web applications ================================================ Aztek Forum 4.0 Multiple Vulnerabilities Exploit ================================================ !/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header...

Aztek Forum 4.0 - Multiple Vulnerabilities

!/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get database informations sploit Full Path Disclosure -...

Aztek Forum 4.0 Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; / header Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435...

Aztek Forum 4.0 - Multiple Vulnerabilities

Aztek Forum 4.0 - Multiple Vulnerabilities !/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get database...