PHP-Fusion <= 6.01.15 Multiple Vulnerabilities

Name: PHP-Fusion = 6.01.15 Multiple Vulnerabilities Vendor: http://php-fusion.co.uk/ Credits: charles "real" F. charlesfolathotmail.fr http://realn.free.fr/ Date: 08/05/08 01. XSS Vulnerability 40| $pres = dbquery"SELECT photoid FROM ".$dbprefix."photos WHERE | photoorder='".$data'photoorder'-1."...

frs-lfi.txt

Respect for Rgod...R.I.P my master! AUTHOR : Matrix86 Contact: matrix86 AT tuxmealux DOT net Found Lfi Local file inclusion in: /infusions/ranksystem/forum.php /infusions/ranksystem/profile.php Vulnerability info: Line: 12 Code: include"../infusions/ranksystem/locale/".$settings'locale'.".php";...

CVE-2008-1918

SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magicquotesgpc is disabled and the database table prefix is known, allows remote authenticated users to execute arbitrary SQL commands via the submitinfo parameter in a link submission action. NOTE: it was later...

Sql injection

SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magicquotesgpc is disabled and the database table prefix is known, allows remote authenticated users to execute arbitrary SQL commands via the submitinfo parameter in a link submission action. NOTE: it was later...

PHP-Fusion submit.php文件SQL注入漏洞

BUGTRAQ ID: 28855 PHP-Fusion是一款基于PHP的内容管理系统。 PHP-Fusion的submit.php文件没有正确地过滤对submitinfo参数的输入便在SQL查询中使用，远程攻击者可能利用此漏洞执行SQL注入攻击。 相关代码： 1. if $stype == "l" 2. 3. if isset$POST'submitlink' 4. 5. if $POST'linkname' != "" && $POST'linkurl' != "" && $POST'linkdescription' != "" 6. $submitinfo'linkcategory...

CVE-2008-1918

PHP-Fusion is affected by an SQL injection in submit.php affecting versions 6.01.14 and 6.00.307 (note: later reported in 7.00.2). The vulnerability occurs when magic_quotes_gpc is disabled and the database table prefix is known, allowing remote authenticated users to execute arbitrary SQL via th...

CVE-2008-1918

SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magicquotesgpc is disabled and the database table prefix is known, allows remote authenticated users to execute arbitrary SQL commands via the submitinfo parameter in a link submission action. NOTE: it was later...

phpfusion-sql.py.txt

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This was a priv8 Exploit...

PHP-Fusion 6.00.307 Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ &nbs...

PHP-Fusion <= 6.01.14 Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / /...

PHP-Fusion 6.01.14 - Blind SQL Injection

PHP-Fusion 6.01.14 - Blind SQL Injection !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...

PHP-Fusion <= 6.01.14 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== PHP-Fusion | |||| /| / / ================================================================================================= This was a priv8 Exploit...

PHP-Fusion 6.01.14 - Blind SQL Injection

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This was a priv8 Exploit...

VMSA-2008-0005:Several CRITICAL security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

VMSA-2008-0005.1 Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0005.1 VMware Security AdvisorySynopsis: Several critical security vulnerabilities have bee...

Download Management 1.00 for PHP-Fusion - Multiple Local File Inclusions

Download Management 1.00 for PHP-Fusion - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/27618/info Download Management for PHP-Fusion is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issu...

Download Management 1.00 for PHP-Fusion - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/27618/info Download Management for PHP-Fusion is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an attacker to access potentially sensitive information and...

RHEL 4 : kernel (RHSA-2007:1104)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:1104 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security...

CentOS 4 : kernel (CESA-2007:1104)

Updated kernel packages that fix various security issues and several bugs in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...

kernel security update

CentOS Errata and Security Advisory CESA-2007:1104 Updated kernel packages that fix various security issues and several bugs in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...