Lucene search
+L

9923 matches found

Cvelist
Cvelist
•added 2006/09/29 12:00 a.m.•39 views

CVE-2006-5076

Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the includespath parameter in 1 admin/index.php, 2 Facts.php, or 3 search.php...

7.5AI score0.0359EPSS
SaveExploits4References7
Positive Technologies
Positive Technologies
•added 2006/09/29 12:00 a.m.•15 views

PT-2006-5814 · Openconcept · Openconcept Back-End Cms

Name of the Vulnerable Software and Affected Versions: OpenConcept Back-End version 0.4.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the includes path parameter in several PHP files, including "admin/index.php", "Facts.php", and "search.php"...

7.5CVSS8AI score0.0359EPSS
SaveExploits4References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/29 12:00 a.m.•8 views

CVE-2006-5076: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the includespath parameter in 1 admin/index.php, 2 Facts.php, or 3 search.php...

7.5CVSS6.4AI score0.0359EPSS
SaveExploits4References1
CVE
CVE
•added 2006/09/29 12:00 a.m.•123 views

CVE-2006-5076

CVE-2006-5076 relates to OpenConcept Back-End 0.4.5/0.4.5-era builds with multiple PHP remote file inclusion vulnerabilities. The flaw is triggered via the includes_path parameter in several PHP entry points (e.g., admin/index.php, Facts.php, search.php), allowing remote code execution. Related r...

7.5CVSS7.6AI score0.0359EPSS
SaveExploits4References7Affected Software1
FreeBSD
FreeBSD
•added 2006/09/29 12:00 a.m.•23 views

postnuke -- admin section SQL injection

ISS X-Force reports: PostNuke is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the admin section using the hits parameter, which could allow the attacker to view, add, modify or delete information in the back-end database...

7.5CVSS7.1AI score0.01355EPSS
SaveExploits0References3
securityvulns
securityvulns
•added 2006/09/27 12:00 a.m.•94 views

Back-end => 0.4.5 Remote File Include Vulnerabilities

Back-end = 0.4.5 Remote File Include Vulnerabilities Script.............. :Back-end Discovered By.... : Root3rH3ll Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.PersainFox.com We ArE : Root3rH3LL & Arash.Rj Spical TNX Irania Hackers : Aria-Security , Crouz...

2.7AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/09/25 12:00 a.m.•17 views

Back-End CMS 0.4.5 - search.php?includes_path Remote File Inclusion

Back-End CMS 0.4.5 - search.php?includespath Remote File Inclusion source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an...

7.5AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/09/25 12:00 a.m.•24 views

Back-End CMS 0.4.5 - Facts.php?includes_path Remote File Inclusion

Back-End CMS 0.4.5 - Facts.php?includespath Remote File Inclusion source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an...

7.5AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/09/25 12:00 a.m.•23 views

Back-End CMS 0.4.5 - adminindex.php?includes_path Remote File Inclusion

Back-End CMS 0.4.5 - adminindex.php?includespath Remote File Inclusion source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows ...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/09/25 12:00 a.m.•33 views

Back-End CMS 0.4.5 - '/admin/index.php?includes_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

7.5CVSS5.8AI score0.0359EPSS
SaveExploits4
Exploit DB
Exploit DB
•added 2006/09/25 12:00 a.m.•40 views

Back-End CMS 0.4.5 - 'Facts.php?includes_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

7.5CVSS5.8AI score0.0359EPSS
SaveExploits4
Exploit DB
Exploit DB
•added 2006/09/25 12:00 a.m.•40 views

Back-End CMS 0.4.5 - 'search.php?includes_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

7.5CVSS5.8AI score0.0359EPSS
SaveExploits4
securityvulns
securityvulns
•added 2006/08/10 12:00 a.m.•54 views

CivicSpace Version 0.8.5 HTML injection

HeLiOsZ - Dark End Team - Internet Security Team CivicSpace Version 0.8.5 HTML injection IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: www.civicspacelabs.org Exploit: - To exploit this issue you must only put your...

0.9AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/08/09 12:00 a.m.•49 views

Archangel Weblog 0.90.02 and prior Multiple HTML injections

HeLiOsZ - Dark End Team - Internet Security Team Archangel Weblog 0.90.02 and prior Multiple HTML injections IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.archangelmgt.com/ Exploit: - To exploit this issue yo...

0.3AI score
SaveExploits0
myhack58
myhack58
•added 2006/07/09 12:00 a.m.•34 views

I'm such a hack Vientiane free Internet access-vulnerability warning-the black bar safety net

Author: 2 2 The century of the black hole Not much technical content, the master does not have to look 1. Easily bypass Vientiane to achieve free Internet access I family poverty, but the addiction was better than the others small. Into the University, the school room class time for free, but spa...

1.4AI score
SaveExploits0
myhack58
myhack58
•added 2006/06/26 12:00 a.m.•22 views

Dove gray ultimate free kill tutorial-vulnerability warning-the black bar safety net

To this station also quite a few days, learned a lot of knowledge. Here today, I also want to talk about yourself tofree to killperception. A week ago,I dofree to killby Kabbah, rising, Kingsoft, Norton, etc. files and memory. I'm very excited about thefree to killmethod in the online publication...

0.6AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2006/06/12 12:00 a.m.•28 views

Back-end0721.txt

/ Federico Fazzi, / Back-end = 0.7.2.1 jpcache.php Remote command execution / 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and cracker can execute a remote command...

SaveExploits0
securityvulns
securityvulns
•added 2006/06/09 12:00 a.m.•51 views

Back-end = 0.7.2.1 (jpcache.php) Remote command execution

/ Federico Fazzi, [email protected] / Back-end = 0.7.2.1 jpcache.php Remote command execution / 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and cracker can execute a remote...

0.6AI score
SaveExploits0
zdt
zdt
•added 2006/06/08 12:00 a.m.•90 views

Back-End CMS <= 0.7.2.1 (jpcache.php) Remote Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== Back-End CMS Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2006/06/08 12:00 a.m.•28 views

Back-End CMS &lt;= 0.7.2.1 (jpcache.php) Remote Include Vulnerability

No description provided by source. Federico Fazzi, [email protected] Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and...

7.1AI score
SaveExploits0
Rows per page
Query Builder