1347 matches found
CVE-2008-2088
The provided CVE-2008-2088 data describe a SQL injection in PHP Forge 3.0 beta 2, affecting admin/news.php. The vulnerability occurs when crafting the news module’s request to admin.php via the id parameter, enabling remote attackers to execute arbitrary SQL commands. The documents do not specify...
CVE-2008-1930
CVE-2008-1930 affects WordPress 2.5 where cookie authentication relies on a hash of a concatenated string of USERNAME and EXPIRY_TIME. This design allows remote attackers to forge cookies by creating a username that yields the same string, enabling escalation to administrator privileges (cryptogr...
PHP Forge <= 3 beta 2 (id) Remote SQL Injection Vulnerability
No description provided by source. ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 b锚ta...
phpforge-sql.txt
========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 bêta Bug : Remote SQL Injection...
PHP Forge <= 3 beta 2 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= PHP Forge = 3 beta 2 id Remote SQL Injection Vulnerability ============================================================= ========================================================...
PHP Forge 3 Beta 2 - id SQL Injection
PHP Forge 3 Beta 2 - id SQL Injection ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0...
PHP Forge 3 Beta 2 - 'id' SQL Injection
========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 bêta Bug : Remote SQL Injection...
cb075-rfi.txt
Content Builder 0.7.5 RFI Bug Script Home Page : http://www.content-builder.de/ Source Forge Script Link : http://sourceforge.net/projects/content-builder/ Script Download URL : http://www.content-builder.de/modules/download/download.php?id=821 The Content Builder is a powerful German...
Command injection
Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...
CVE-2006-5462
Mozilla Network Security Service NSS library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatur...
CVE-2006-5484
SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS 1 v1.5 signature that is signed by that RSA key and prevents...
CVE-2006-5484
SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS 1 v1.5 signature that is signed by that RSA key and prevents...
PHPForge3b2.txt
PHP Forge 3b2 /inc/inc.php Remote File Include Vulnerability Source Code: http://www.comscripts.com/jump.php?action=script&id=697 Vulnerable Code: require$cfgracine."inc/vars.php"; require$cfgracine."inc/config.php"; require$cfgracine."inc/fonctions.php"; require$cfgracine."inc/systeme.php";...
PHP Forge 3b2 (/inc/inc.php) Remote File Include Vulnerability
PHP Forge 3b2 /inc/inc.php Remote File Include Vulnerability Source Code: http://www.comscripts.com/jump.php?action=script&id=697 Vulnerable Code: require$cfgracine."inc/vars.php"; require$cfgracine."inc/config.php"; require$cfgracine."inc/fonctions.php"; require$cfgracine."inc/systeme.php";...
PHP Forge 3b2 (/inc/inc.php) Remote File Include Vulnerability
---- ERNE ---- TheBekir ---- patchlodel-0.7.3 - Remote File Include Vulnerabilities site : Www.Hack-Medya.Org & Www.SavSak.Com Script : http://www.lodel.org/download/patchlodel-0.7.3.zip Credits : TheBekir & ERNE Contact : erne at ernealizm dot com email concealed Thanks : BlackWhite, D3ngszn,...
CVE-2006-5201
Multiple packages on Sun Solaris, including 1 NSS; 2 Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.212, and SDK and JRE 1.3.x up to 1.3.119; 3 JSSE 1.0.303 and earlier; 4 IPSec/IKE; 5 Secure Global Desktop; and 6 StarOffice, when using an RSA key with exponent 3, removes...
JVN#51301450 NetCommons cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. As a result, a remote attacker could forge the web page contents. Solution Products Affected NetCommons 1.0.8 and earlier...
Joomla com_bayesiannaivefilter Component <= 1.1 Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Joomla combayesiannaivefilter Component = 1.1 Inclusion Vulnerability ======================================================================= Pablin77 - XTech Inc Grou...
CVE-2006-3917
PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgracine parameter...
CVE-2006-3917
The CVE-2006-3917 issue affects R. Corson PHP Forge 3 beta 2 and earlier, where a PHP remote file inclusion vulnerability exists in inc/gabarits.php. The root cause is improper handling of the cfg_racine parameter, allowing a remote attacker to supply a URL and execute arbitrary PHP code. This im...