CVE-2007-0601

CVE-2007-0601 affects Aztek Forum 4.00 where common/safety.php bypasses blacklist matching against GET/PUT by abusing a URL-encoded cookie (%22 for 2) to manipulate data. This is a network‑level issue with low attack complexity and no authentication required, potentially impacting confidentialit...

CVE-2007-0599

Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as copying arbitrary files using index/commonactions.php, via vectors associated with extract operations on th...

CVE-2007-0596

CVE-2007-0596 affects Aztek Forum 4.00. The vulnerability is a PHP remote file inclusion in index/main.php, exploitable via a URL in the PF[top_url] parameter. It can allow remote authenticated administrators to execute arbitrary PHP code. The connected documents provide no explicit remediation o...

CVE-2007-0596

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

CVE-2007-0589

SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to infouser.asp...

CVE-2007-0589

CVE-2007-0589 affects Forum Livre 1.0 and is a SQL injection vulnerability in the info_user.asp user parameter that could allow remote arbitrary SQL execution. Root cause: unsanitized user input enabling database command execution. Impact: attacker can read/modify data and potentially compromise ...

CVE-2007-0598

SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cookie to forum.php...

CVE-2007-0589: Undefined Security Weakness

SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to infouser.asp...

CVE-2007-0601: Undefined Security Weakness

common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences URL encoded double quotes and other potentially dangerous manipulations by sending a cookie, which bypasses the blacklist matching against the GET and PUT superglobal arrays...

CVE-2007-0599: Undefined Security Weakness

Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as copying arbitrary files using index/commonactions.php, via vectors associated with extract operations on th...

CVE-2007-0590: Undefined Security Weakness

Cross-site scripting XSS vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the palavra parameter...

CVE-2007-0596: Undefined Security Weakness

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

CVE-2007-0597: Undefined Security Weakness

Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message...

CVE-2007-0598: Undefined Security Weakness

SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cookie to forum.php...

admentor-sql.txt

AdMentor banners admin SQL injection By : sn0oPy Risk : high Site : http://www.aspcode.net/products/admentor Dork : inurl:"admentor/admin" exploit : UserID = 'or' '=' Password = 'or' '=' contact : [email protected] greetz : subzero, Avg Teamhttp://forums.avenir-geopolitique.net. references :...

aztek41-sploit.txt

!/usr/bin/php = 1.2 errorreportingEALL ^ ENOTICE; / header Aztek Forum 4.1 Multiple Vulnerabilities Exploit header =================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get databases...

Aztek Forum 4.1 Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php AztekForum4.1MultipleVulnerabilitiesExploit header================================================== sploitOwner-root statusTryingtoregisteranewuser sploitLogin/Password-phpsploit8435 statusTryingtogetdatabaseinformations...

Forum Livre 1.0 (SQL Injection / XSS) Multiple Remote Vulnerabilities

No description provided by source. Title : Forum Livre 1.0 Multiple Remote Vulnerabilities Author : ajann Contact : : $$ : Free SQL--------------------------------------------------------- Login Before..- http://target/path//infouser.asp?user=SQL Example:...

Aztek Forum 4.0 - Multiple Vulnerabilities

Aztek Forum 4.0 - Multiple Vulnerabilities !/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get database...

Forum Livre 1.0 (SQL Injection / XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Forum Livre 1.0 SQL Injection / XSS Multiple Remote Vulnerabilities ===================================================================== Title : Forum Livre 1.0 Multipl...