Prozilla Webring Website Script - 'category.php?cat' SQL Injection

--==+================================================================================+==-- --== Prozilla Webring Website Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Remote file inclusion

PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: A reliable third party disputes this vulnerability because the applicable include is within a...

CVE-2007-4181

PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: A reliable third party disputes this vulnerability because the applicable include is within a...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in 1 the sunPath parameter to include.php or 2 the dir parameter to skin/board/default/doctype.php...

PT-2007-3744 · Sphider · Sphider

Name of the Vulnerable Software and Affected Versions: Sphider versions 1.2.x Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include dir parameter in the index.php file. A third party disputes this issue, stating that the application is not vulnerabl...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...

PT-2007-3539 · N/X +3 · Web Content Management News System +4

Name of the Vulnerable Software and Affected Versions: PclTar module versions 1.3 and 1.3.1 Joomla! version 1.5.0 Beta N/X Web Content Management System WCMS version 4.5 CJG EXPLORER PRO version 3.3 phpSiteBackup version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP...

Post REvolution 0.7.0 RC 2 - 'dir' Remote File Inclusion

Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...

PT-2007-3414 · Ivan · Ivan Gallery Script

Name of the Vulnerable Software and Affected Versions: Ivan Gallery Script version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter in the index.php file. There is a dispute regarding version 0.3, with some researchers stating that th...

DEBIAN-CVE-2007-1352

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow...

Multiple font integer overflows (CVE-2007-1352)

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow...

PT-2006-7480 · Unknown · Phpirc Bot

Name of the Vulnerable Software and Affected Versions: PHPIrc bot version 0.2 Description: A remote file inclusion issue in the php4you.php file allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. Recommendations: For PHPIrc bot version 0.2, consider validating a...

CVE-2006-6809

CVE-2006-6809 covers multiple PHP remote file inclusion vulnerabilities in Vladimir Menshakov buratinable templator (aka bubla) 1.0.0rc2 and earlier. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a URL in the (1) bu_dir or (2) bu_config[dir] parameter of process...

CVE-2006-6788

Multiple PHP remote file inclusion vulnerabilities in LuckyBot 3 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 run.php or 2 ircbot.class.php...

CVE-2006-6600

Cross-site scripting XSS vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609...

GNU InetUtils ftpd 1.4.2 (ld.so.preload) Remote Root Exploit

No description provided by source. FTP server GNU inetutils 1.4.2 Remote Root Exploit This program remotely exploits the most recent versions of GNU inetutils ftpd on linux systems. Requirements: 1. There MUST be a chroot'ed environment for the logged in user 2. Directory etc must be writeable by...

CVE-2006-6273

spindex.php in Simple PHP Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid dir parameter, which reveals the path in an error message...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...