CVE-2007-0385

The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information the full path via "unvalidated output" in FAQ/index.php, possibly involving an undefined idcat variable...

Design/Logic Flaw

The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information the full path via "unvalidated output" in FAQ/index.php, possibly involving an undefined idcat variable...

CVE-2007-0385

The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information the full path via "unvalidated output" in FAQ/index.php, possibly involving an undefined idcat variable...

JetStat JS ASP Faq Manager SQL注入漏洞

JetStat JS ASP Faq Manager是一款基于PHP的FAQ管理程序。 JetStat JS ASP Faq Manager不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是由于多个脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 JetStat JS ASP Faq Manager 1.10 http://www.jetstat.com/asp/faq/...

Knusperleicht FAQ Script Index.PHP远程文件包含漏洞

Knusperleicht FAQ是一款基于PHP的FAQ管理程序。 Knusperleicht FAQ不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的"faqpath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht FAQ 1.0 http://knusperleicht.at/index.php?knuspi=phpecke...

JiRo's FAQ Manager Login.ASP SQL注入漏洞

JiRo's FAQ Manager是一款基于ASP的WEB应用程序。 JiRo's FAQ Manager不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Login.ASP'脚本对用户提交的'tid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 JiRos FAQ Manager 1.0 目前没有解决方案提供： http://www.jiros.net/products/product.asp?pID=9...

CVE-2006-6149

SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter...

CVE-2006-6149

SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter...

CVE-2006-6149

CVE-2006-6149 affects JiRos FAQ Manager 1.0, where the vulnerability resides in the web-facing code: SQL injection via the tID parameter in index.asp. The underlying issue is improper input handling in the application that allows constructing and executing arbitrary SQL commands on the backend da...

JiRos FAQ Manager 1.0 (index.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : JiRo?s FAQ Manager v1.0 index.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//index.asp?tID=SQL Example:...

JiRos FAQ Manager 1.0 (index.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== JiRos FAQ Manager 1.0 index.asp Remote SQL Injection Vulnerability ==================================================================== Title : JiRois FAQ Manager v1.0...

JiRos FAQ Manager 1.0 - 'index.asp' SQL Injection

Title : JiRo´s FAQ Manager v1.0 index.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//index.asp?tID=SQL Example: //index.asp?tID=-1%20union%20select%200,uPassword,0,0,0,0,0,0,0,0,0,0,0,0%20from%20JFStblusers%20where%20no%20like%200...

JiRos FAQ Manager 1.0 - index.asp SQL Injection

JiRos FAQ Manager 1.0 - index.asp SQL Injection Title : JiRo´s FAQ Manager v1.0 index.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//index.asp?tID=SQL Example:...

Microsoft Security Bulletin MS06-071 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (928088)

Microsoft Security Bulletin MS06-071 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution 928088 Published: November 14, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows and have installed Microsoft XML Core Services MSXML 4.0 ...

CVE-2006-5637

PHP remote file inclusion vulnerability in faqreply.php in Faq Administrator 2.1b allows remote attackers to execute arbitrary PHP code via a URL in the email parameter...

CVE-2006-5637

PHP remote file inclusion vulnerability in faqreply.php in Faq Administrator 2.1b allows remote attackers to execute arbitrary PHP code via a URL in the email parameter...

CVE-2006-5637

CVE-2006-5637 describes a PHP remote file inclusion vulnerability in Faq Administrator 2.1b, where an attacker can invoke arbitrary PHP code via a URL supplied in the email parameter of faq_reply.php. The NVD entry lists a base score of 7.5 (HIGH) with network access and low attack complexity, im...

Faq Administrator 2.1 (faq_reply.php) Remote File Include Vulnerability

No description provided by source. ================================================================== Faq Administrator RFI ================================================================== Info:- Scripts: Faq Administrator http://www.campbus.com/downloads/faqadmin/faqadmin-current.tgz Version :...

Faq Administrator 2.1 - 'faq_reply.php' Remote File Inclusion

================================================================== Faq Administrator RFI ================================================================== Info:- Scripts: Faq Administrator http://www.campbus.com/downloads/faqadmin/faqadmin-current.tgz Version : 2.1b Dork & vuln : download script...

Faq Administrator 2.1 (faq_reply.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Faq Administrator 2.1 faqreply.php Remote File Include Vulnerability =======================================================================...