75 matches found
CVE-2014-4516
The CVE-2014-4516 entry affects the WordPress BIC Media Widget plugin (
My-BIC 0.6.5 - Mybic_Server.PHP Remote File Include Vulnerability
No description provided by source...
PT-2014-5946
Name of the Vulnerable Software and Affected Versions BIC Media Widget plugin version 1.0 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the param parameter in the...
CVE-2014-4516: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...
WordPress BIC Media Widget Plugin <= 1.0 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "param" parameter. Solution Update the plugin...
CVE-2006-6018
Summary: For Jim Plush My-BIC 0.6.5, multiple CVEs exist describing PHP remote file inclusion (RFI) vectors in mybic_server.php. CVE-2006-6018 cites an RFI via INC_PATH (a claim disputed by CVE and researchers because INC_PATH is a constant). CVE-2006-5089 cites an RFI via the file parameter (wit...
CVE-2006-6018: Undefined Security Weakness
PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the INCPATH parameter, a different vector than CVE-2006-5089. NOTE: this issue is disputed by CVE and third party researchers because INCPATH is ...
My-BIC => 0.6.5 Remote File Include Vulnerability
No description provided by source. !/usr/bin/perl My-BIC = 0.6.5 Remote File Include Vulnerability Exploit Script.............. : My-BIC Expl0iter.... : theEdit0r Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.Xmors.com Pablic http://Www.Xmors.net pirv8 We...
mybic065-rfi.pl.txt
!/usr/bin/perl My-BIC = 0.6.5 Remote File Include Vulnerability Exploit Script.............. : My-BIC Expl0iter.... : theEdit0r Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.Xmors.com Pablic http://Www.Xmors.net pirv8 We ArE : Scorpiunix , KAMY4r , Sh3ll ,...
CVE-2006-5089
PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this...
CVE-2006-5089
CVE-2006-5089 describes a PHP remote file inclusion in Jim Plush My-BIC 0.6.5 via the file parameter in mybic_server.php. The related CVE-2006-6018 notes a different vector (INC_PATH) for the same software and states that the issue is disputed because INC_PATH is a constant. PT-2006-5827 provides...
CVE-2006-5089: Undefined Security Weakness
PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this...
PT-2006-5827 · My-Bic · My-Bic
Name of the Vulnerable Software and Affected Versions: My-BIC version 0.6.5 Description: A remote file inclusion issue in mybic server.php allows remote attackers to potentially execute arbitrary PHP code via a URL in the file parameter. However, it's noted that the file variable is defined befor...
My-BIC 0.6.5 - Mybic_Server.php Remote File Inclusion
My-BIC 0.6.5 - MybicServer.php Remote File Inclusion source: https://www.securityfocus.com/bid/20208/info My-BIC is prone to a remote file-include vulnerability because these applications fail to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise...
My-BIC 0.6.5 - 'Mybic_Server.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20208/info My-BIC is prone to a remote file-include vulnerability because these applications fail to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other...