50 matches found
EUVD-2005-3841
Malware in sbrugna...
EUVD-2006-1158
Malware in sbrugna...
EUVD-2006-0975
Malware in sbrugna...
Fantastic News 2.1.1 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16842/info Fantastic News is prone to an SQL-injection vulnerability. Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying...
Fantastic News <= 2.1.4 - Multiple Remote File Include Vulnerabilities
No description provided by source. +------------------------------------------------------------------------------------------- + Fantastic News == 2.1.4 CONFIGscriptpath Multiple Remote File Include Vulnerabilities...
Fantastic News <= 2.1.2 (script_path) Remote Code Execution Exploit
No description provided by source...
Fantastic Scripts Fantastic News 2.1.1 News.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15622/info Fantastic News is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...
Fantastic News <= 2.1.3 (script_path) Remote File Include Vulnerability
No description provided by source. ============================================================================================== Fantastic News = v2.1.3 CONFIGscriptpath Remote File Inclusion Exploit ===============================================================================================...
Fantastic News <= 2.1.4 Multiple Remote File Include Vulnerabilities
No description provided by source. +------------------------------------------------------------------------------------------- + Fantastic News == 2.1.4 CONFIGscriptpath Multiple Remote File Include Vulnerabilities...
Fantastic News 2.1.4 - Multiple Remote File Inclusions
+------------------------------------------------------------------------------------------- + Fantastic News Yee7 Team - WwW.Yee7.com -archive.php + + on line's 16,17,18,19 + = requireonce$CONFIG'scriptpath'."config.php"; + = requireonce$CONFIG'scriptpath'."functions/functions.php"; + =...
Fantastic News 2.1.4 - Multiple Remote File Inclusions
Fantastic News 2.1.4 - Multiple Remote File Inclusions +------------------------------------------------------------------------------------------- + Fantastic News Yee7 Team - WwW.Yee7.com -archive.php + + on line's 16,17,18,19 + = requireonce$CONFIG'scriptpath'."config.php"; + =...
Fantastic News <= 2.1.4 Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Fantastic News archive.php + + on line's 16,17,18,19 + = requireonce$CONFIG'scriptpath'."config.php"; + = requireonce$CONFIG'scriptpath'."functions/functions.php"; + =...
CVE-2006-6542
SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-6542
SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-6542
The CVE covers an SQL injection in the news.php script of Fantastic News, affecting version 2.1.4 and earlier. The vulnerability arises from unsafely handling the id parameter, enabling remote attackers to execute arbitrary SQL commands. This can impact confidentiality, integrity, and availabilit...
CVE-2006-6542: Undefined Security Weakness
SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Fantastic News 2.1.4 (news.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ Fantastic News 2.1.4 news.php Remote SQL Injection Exploit ============================================================ !perl use IO::Socket; dc3.dl.am if...
CVE-2006-4671
CVE-2006-4671 is a PHP remote file inclusion in Fantastic News 2.1.4 (and possibly earlier) that lets an attacker execute arbitrary PHP code by supplying a URL to CONFIG[script_path] in headlines.php. This is a different vector from CVE-2006-1154. Affected product/version: Fantastic News 2.1.4 (a...
CVE-2006-4671: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGscriptpath parameter, a different vector than CVE-2006-1154...
[SA21807] Fantastic News "CONFIG[script_path]" File Inclusion Vulnerabilities
TITLE: Fantastic News "CONFIGscriptpath" File Inclusion Vulnerabilities SECUNIA ADVISORY ID: SA21807 VERIFY ADVISORY: http://secunia.com/advisories/21807/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Fantastic News 2.x http://secunia.com/product/6254/ DESCRIPTION:...