CVE-2009-2110

Affected software: DB Top Sites 1.0. Vulnerability type: directory traversal leading to local file inclusion/execution via the u parameter in full.php, index.php, and contact.php when magic_quotes_gpc is disabled. Root cause: directory traversal with .. in the parameter. Impact: remote attackers ...

CVE-2009-2111: Improper Control of Generation of Code

Static code injection vulnerability in addreg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted 1 url and 2 location parameter...

CVE-2009-2110: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...

DB Top Sites 1.0 - index.php?u Local File Inclusion

DB Top Sites 1.0 - index.php?u Local File Inclusion + DB Top Sites v1.0 index.php u Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + Local File Inclusion - Vulnerable code is everywhere...

DB Top Sites 1.0 (index.php u) Local File Inclusion Vulnerability

No description provided by source. + DB Top Sites v1.0 index.php u Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + Local File Inclusion - Vulnerable code is everywhere...

CVE-2009-1749

creationtimestamp| type| source ---|---|--- 2009-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8745...

Mandrake Security Advisory MDVSA-2009:096-1 (printer-drivers)

The remote host is missing an update to printer-drivers announced via advisory MDVSA-2009:096-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle XML DB SID Discovery

This module simply makes an authenticated request to retrieve the sid from the Oracle XML DB httpd server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle XML DB SID Discovery',...

CVE-2009-4755

creationtimestamp| type| source ---|---|--- 2009-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8580...

CVE-2009-2570

creationtimestamp| type| source ---|---|--- 2009-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8562...

CVE-2009-1452

Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pagecss and 2 pagejavascript parameters. NOTE: the pagecontent vector is already is covered by CVE-2009-1450...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pagecss and 2 pagejavascript parameters. NOTE: the pagecontent vector is already is covered by CVE-2009-1450...

CVE-2009-1452

CVE-2009-1452 refers to multiple PHP remote file inclusion flaws in SMA-DB 0.3.13, exploitable through URL parameters _page_css and _page_javascript to execute arbitrary PHP code. The vector _page_content is noted as covered by CVE-2009-1450. The connected records confirm the affected software/co...

CVE-2009-1452

Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pagecss and 2 pagejavascript parameters. NOTE: the pagecontent vector is already is covered by CVE-2009-1450...

CVE-2009-1451

Cross-site scripting XSS vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-1450

PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP code via a URL in the pagecontent parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-1451

Cross-site scripting XSS vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-1450

PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP code via a URL in the pagecontent parameter...

CVE-2009-1450

CVE-2009-1450 affects SMA-DB 0.3.12, where a vulnerability in format.php allows remote attackers to execute arbitrary PHP code via a URL supplied in the _page_content parameter. The issue constitutes a PHP remote file inclusion vulnerability with network exposure and requires no authentication, a...