CVE-2009-0383

delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request...

CVE-2009-0383

delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request...

CVE-2009-0383

CVE-2009-0383 affects Max.Blog 1.0.6; the delete.php endpoint does not properly restrict access, enabling remote attackers to delete arbitrary blog posts via a direct request. The issue is caused by improper access control on the delete operation. Impact is partial integrity/partial availability ...

CVE-2009-0383: Undefined Security Weakness

delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request...

CVE-2008-4757: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a addpostit.php b delete.php, and c modprestdate.php; and the 2 prev parameter to d prestdetail.php...

Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit

Exploit for unknown platform in category web applications ======================================================= Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit ======================================================= !/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Explo...

Sports Clubs Web Panel 0.0.1 - Remote Game Delete

!/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$ ./sportspanel.p...

CVE-2008-3302

CVE-2008-3302 describes an SQL injection in BilboBlog 0.2.1. The vulnerability exists in admin/delete.php when magic_quotes_gpc is disabled, allowing remote authenticated administrators to execute arbitrary SQL commands via the num parameter. Public references confirm the affected component and c...

CVE-2008-3302: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magicquotesgpc is disabled, allows remote authenticated administrators to execute arbitrary SQL commands via the num parameter...

eNews 0.1 (delete.php) Arbitrary Delete Post Vulnerability

No description provided by source. eNews 0.1 delete.php Arbitrary Delete Post Vulnerability Author: iLker Kandemir MEFISTO Script download : http://www.hotscripts.com/Detailed/81086.html script demo : http://emvvy.com/demos/enews/ site : www.dumenci.net...

eNews 0.1 - delete.php Arbitrary Delete Post

eNews 0.1 - delete.php Arbitrary Delete Post eNews 0.1 delete.php Arbitrary Delete Post Vulnerability Author: iLker Kandemir MEFISTO Script download : http://www.hotscripts.com/Detailed/81086.html script demo : http://emvvy.com/demos/enews/ site : www.dumenci.net...

eNews 0.1 - 'delete.php' Arbitrary Delete Post

eNews 0.1 delete.php Arbitrary Delete Post Vulnerability Author: iLker Kandemir MEFISTO Script download : http://www.hotscripts.com/Detailed/81086.html script demo : http://emvvy.com/demos/enews/ site : www.dumenci.net ---------------------------------------------------------------- //poc: if...

CVE-2008-1785

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

CVE-2008-1785

The CVE-2008-1785 issue affects Prozilla Top 100 1.2, where delete.php can be abused by remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter. Root cause appears to be parameter manipulation in delete.php, enabling unauthorized destructive acti...

CVE-2008-1785

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

CVE-2008-1785: Improper Input Validation

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

CVE-2007-4290

Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the scriptroot parameter to 1 delete.php, 2 edit.php, or 3 inc/common.inc.php; or 4 database.php, 5 entries.php, 6 index.php, 7 logout.php, or 8 settings.ph...

CVE-2007-1451: Undefined Security Weakness

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" cleanup.php and then "Suppression des fichiers d'installation" delete.php...

freeqboard-rfi.txt

freeqboard = 1.1 qbpath Remote File Include Vulnerability Author: Mr.3FReeT Softname: freeqboard code in : about.php , contact.php , delete.php , faq.php , index.php include "config.php"; include $qbpath."incs/mysql.php"; Exploit : """""""" www.site.com/path/index.php?qbpath=shellcode.txt?...

CVE-2006-5511: Undefined Security Weakness

Direct static code injection vulnerability in delete.php in JaxUltraBB JUBB 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter...