CVE-2007-0601

common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences URL encoded double quotes and other potentially dangerous manipulations by sending a cookie, which bypasses the blacklist matching against the GET and PUT superglobal arrays...

CVE-2007-0590

Cross-site scripting XSS vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the palavra parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the palavra parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

CVE-2007-0590

Cross-site scripting XSS vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the palavra parameter...

CVE-2007-0601

CVE-2007-0601 affects Aztek Forum 4.00 where common/safety.php bypasses blacklist matching against GET/PUT by abusing a URL-encoded cookie (%22 for 2) to manipulate data. This is a network‑level issue with low attack complexity and no authentication required, potentially impacting confidentialit...

CVE-2007-0597

Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message...

CVE-2007-0596

CVE-2007-0596 affects Aztek Forum 4.00. The vulnerability is a PHP remote file inclusion in index/main.php, exploitable via a URL in the PF[top_url] parameter. It can allow remote authenticated administrators to execute arbitrary PHP code. The connected documents provide no explicit remediation o...

CVE-2007-0589

CVE-2007-0589 affects Forum Livre 1.0 and is a SQL injection vulnerability in the info_user.asp user parameter that could allow remote arbitrary SQL execution. Root cause: unsanitized user input enabling database command execution. Impact: attacker can read/modify data and potentially compromise ...

CVE-2007-0599

Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as copying arbitrary files using index/commonactions.php, via vectors associated with extract operations on th...

CVE-2007-0598

The CVE-2007-0598 issue affects Aztek Forum 4.00, specifically the forum/load.php component. The vulnerability arises from improper handling of the fid cookie by forum.php, enabling remote attackers to inject and execute arbitrary SQL commands via the cookie value. The NVD entry notes a high seve...

CVE-2007-0601

common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences URL encoded double quotes and other potentially dangerous manipulations by sending a cookie, which bypasses the blacklist matching against the GET and PUT superglobal arrays...

CVE-2007-0590

CVE-2007-0590 is a Cross-site scripting (XSS) vulnerability in Forum Livre 1.0, specifically in busca2.asp, where an attacker can inject arbitrary web script or HTML via the palavra parameter. The NVD entry provides a CVSS v2 base score of 5.8 (Medium) with network access, requiring no authentica...

CVE-2007-0599

CVE-2007-0599 affects Aztek Forum 4.00 and represents a variable overwrite vulnerability in common/config.php. The issue allows remote attackers to overwrite arbitrary program variables and perform other unauthorized actions, such as copying arbitrary files, by abusing extract operations on the P...

CVE-2007-0598

SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cookie to forum.php...

CVE-2007-0596

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

CVE-2007-0589

SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to infouser.asp...

CVE-2007-0597

The CVE-2007-0597 entry affects Aztek Forum 4.00. Affected component: forum.php handling for fid=XD. Root cause: error messages disclose the path, enabling information disclosure. Impact: sensitive internal path information is exposed to remote attackers. Exploitation status/details are not provi...

admentor-sql.txt

AdMentor banners admin SQL injection By : sn0oPy Risk : high Site : http://www.aspcode.net/products/admentor Dork : inurl:"admentor/admin" exploit : UserID = 'or' '=' Password = 'or' '=' contact : [email protected] greetz : subzero, Avg Teamhttp://forums.avenir-geopolitique.net. references :...

aztek41-sploit.txt

!/usr/bin/php = 1.2 errorreportingEALL ^ ENOTICE; / header Aztek Forum 4.1 Multiple Vulnerabilities Exploit header =================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get databases...