Pie Cart Pro => (Home_Path) Remote File Inclusion Exploit

==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...

CVE-2006-4860

CVE-2006-4860 concerns Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311, with multiple vulnerabilities in 12 PHP/HTML files (index.php, minixml.inc.php, doc.inc.php, element.inc.php, node.inc.php, treecomp.inc.php, forum.html.php, forum.php, antihack.php, content.php, initglobals.php, imanager....

Pie Cart Pro - Home_Path Remote File Inclusion

Pie Cart Pro - HomePath Remote File Inclusion ==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz...

Pie Cart Pro (Home_Path) Remote File Include Vulnerability

No description provided by source. ==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com...

CVE-2006-4860: Undefined Security Weakness

Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...

Pie Cart Pro (Home_Path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ========================================================== Pie Cart Pro HomePath Remote File Include Vulnerability ==========================================================...

Pie Cart Pro - 'Home_Path' Remote File Inclusion

==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...

CVE-2006-4207: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to 1 content/content.php or 2 /inc/indexhead.php...

CVE-2006-2853: Undefined Security Weakness

SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2006-1794

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via 1 the $username variable in the mosGetParam function and 2 the $task parameter in the mosMenuCheck function in a includes/mambo.php; and 3 the $filter...

Sql injection

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via 1 the $username variable in the mosGetParam function and 2 the $task parameter in the mosMenuCheck function in a includes/mambo.php; and 3 the $filter...

CVE-2006-1794: Undefined Security Weakness

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via 1 the $username variable in the mosGetParam function and 2 the $task parameter in the mosMenuCheck function in a includes/mambo.php; and 3 the $filter...

CVE-2006-1763: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a 1 greply or 2 gpermaPost action to the blog shard engine/shards/blog.php, or a 3 gviewContent action to the content shard...

CVE-2005-3986

This CVE (CVE-2005-3986) affects Instant Photo Gallery (version 1 and earlier). The vulnerability is SQL injection in two parameters: cat_id in portfolio.php and cid in content.php, allowing remote attackers to execute arbitrary SQL commands. The exploitation is described as remote and results in...

CVE-2005-3986

Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter in portfolio.php and 2 cid parameter in content.php...

CVE-2005-3986: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter in portfolio.php and 2 cid parameter in content.php...

phpgreetz.txt

Language: PHP Script: phpgreetz Version: 0.1a Official website: http://sourceforge.net/projects/phpgreetz/ Problem: Remote file inclusion Discovered by: beford & GB Description: =========== Free greeting card website, being built and distributed as open source. Includes all functions and features...

CVE-2005-3861: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

CVE-2005-3586

content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error...

CVE-2005-3586

The CVE-2005-3586 issue affects Mambo 4.5.2 through 4.5.2.3. The vulnerability allows remote attackers to discover the installation path by triggering an error-response URL, as described in multiple sources including PT-2005-4372. There is no publicly detailed exploit description beyond this beha...