CVE-2026-42471: Deserialization of Untrusted Data

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke client Connection.php:76 calls unserialize on data received from the server response, enabling client-side RCE if connecting to a malicious server...

CVE-2020-11579: Missing Authentication for Critical Function

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php part of the installation process allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled...

moncompte.legrain.fr XSS vulnerability

Vulnerable URL: http://moncompte.legrain.fr/connection.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check moncompte.legrain.f...

Ramui Web Hosting Directory Script 4.0 RFI

Title: Ramui web hosting directory script 4.0 Remote File Include Vulnerability Author: bd0rk Twitter: twitter.com/bd0rk Vendor: http://www.ramui.com Download: http://ramui.com/directory-script/download-v4.html Proof-of-Concept: /gb/include/connection.php lines 6-13 in php-sourcecode class...

Ramui Web Hosting Directory Script 4.0 - Remote File Inclusion

Title: Ramui web hosting directory script 4.0 Remote File Include Vulnerability Author: bd0rk Twitter: twitter.com/bd0rk Vendor: http://www.ramui.com Download: http://ramui.com/directory-script/download-v4.html Proof-of-Concept: /gb/include/connection.php lines 6-13 in php-sourcecode class...

Sulata iSoft (stream.php) Local File Disclosure Exploit

No description provided by source. ========================================================= Sulata iSoft stream.php Local File Disclosure Exploit ========================================================= Exploit Title : Sulata iSoft developer by Rizwan Azam you look site.com/about.php Date : 10...

FlashChat 'connection.php' Role Filter Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31800/info FlashChat is prone to a security-bypass vulnerability. An attacker can leverage this vulnerability to bypass certain security restrictions and gain unauthorized administrative access to the affected application...

FlashChat Role Filter Security Bypass Vulnerability

FlashChat is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tufat:flashchat";...

CVE-2008-6799: Undefined Security Weakness

connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7."...

Sql injection

SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter...

CVE-2008-5895

SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter...

CVE-2008-5895: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter...

FlashChat - connection.php Role Filter Security Bypass

FlashChat - connection.php Role Filter Security Bypass source: https://www.securityfocus.com/bid/31800/info FlashChat is prone to a security-bypass vulnerability. An attacker can leverage this vulnerability to bypass certain security restrictions and gain unauthorized administrative access to the...

FlashChat - 'connection.php' Role Filter Security Bypass

source: https://www.securityfocus.com/bid/31800/info FlashChat is prone to a security-bypass vulnerability. An attacker can leverage this vulnerability to bypass certain security restrictions and gain unauthorized administrative access to the affected application...

CVE-2006-5760: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the racine parameter to 1 functionlog.php, 2 functionbaliseurl.php, or 3 connection.php...

phpDynaSite <= 3.2.2 (racine) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= phpDynaSite = 3.2.2 racine Remote File Include Vulnerabilities ================================================================= WwW.Deltahacking.NeT dynasite3.2.2 Class =...