204 matches found
Work System eCommerce 3.0.33.0.4 - forum.php Remote File Inclusion
Work System eCommerce 3.0.33.0.4 - forum.php Remote File Inclusion source: https://www.securityfocus.com/bid/21580/info WORK system e-commerce is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker ...
CVE-2006-6041: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to 1 index.php, 2 module/forum/forum.php, 3 unspecified files under...
freeforum097.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= FreeForum 0.9.7 fpath Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by XORONturkish hacker...
CVE-2006-5230: Undefined Security Weakness
PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...
FreeForum <= 0.9.7 (forum.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ FreeForum = 0.9.7 forum.php Remote File Include Vulnerability ================================================================...
FreeForum <= 0.9.7 (forum.php) Remote File Include Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= FreeForum 0.9.7 fpath Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by XORONturki...
CVE-2006-4860
CVE-2006-4860 concerns Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311, with multiple vulnerabilities in 12 PHP/HTML files (index.php, minixml.inc.php, doc.inc.php, element.inc.php, node.inc.php, treecomp.inc.php, forum.html.php, forum.php, antihack.php, content.php, initglobals.php, imanager....
CVE-2006-4860: Undefined Security Weakness
Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...
CVE-2006-3142
SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via the MainID parameter...
CVE-2006-3142
SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via the MainID parameter...
CVE-2006-3142
The CVE-2006-3142 entry concerns VBZooM 1.11 with a SQL injection in the forum.php MainID parameter. The underlying issue is improper input handling that allows an attacker to terminate and modify the SQL query, enabling remote execution of arbitrary SQL commands. The vulnerability is characteriz...
CVE-2006-3142: Undefined Security Weakness
SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via the MainID parameter...
vbzoom V1.11 forum.php SQL Injection Vulnerabilities
Discovered By CrAshoVeRrIdE Vbzoom SQL Injection site:www.vbzoom.com Vulnerable: vbzoom V1.11 vulnerable files:forum.php exploit: http://www.sitname.com/vz/forum.php?UserID=1&MainID=sql&Page=1 -------------------------------------------------- Discovered By CrAshoVeRrIdE E-mail:[email protected]...
CVE-2006-1918
Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...
CVE-2006-1918
Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...
CVE-2006-1918
CVE-2006-1918 affects Papoo 2.1.5. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the menuid parameter in index.php or forum.php, and the reporeid_print parameter in print.php. The root cause is improper sanitization of input leading to script/HTML injection. Docum...
CVE-2006-1918: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...