EUVD-2010-0993

Malware in sbrugna...

EUVD-2010-0992

Malware in sbrugna...

Sql injection

SQL injection vulnerability in bannershow.php in Geekhelps ADMP 1.01 allows remote attackers to execute arbitrary SQL commands via the click parameter...

CVE-2010-0967

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to 1 colorvoid/footer.php, 2 default-green/footer.php, 3...

Directory traversal

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to 1 colorvoid/footer.php, 2 default-green/footer.php, 3...

CVE-2010-0968

CVE-2010-0968 affects Geekhelps ADMP 1.01; the vulnerability is in bannershow.php, where the click parameter enables SQL injection. The issue can allow remote attackers to execute arbitrary SQL commands, with potential partial impacts to confidentiality, integrity, and availability (CVSS v2 base ...

CVE-2010-0967

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to 1 colorvoid/footer.php, 2 default-green/footer.php, 3...

CVE-2010-0967

CVE-2010-0967 affects Geekkills ADMP 1.01 (themes/footer.php and related theme files) via directory traversal in the style parameter when magic_quotes_gpc is disabled, enabling remote attackers to include and execute arbitrary local files. Root cause: improper validation/sanitization of the style...

CVE-2010-0968: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bannershow.php in Geekhelps ADMP 1.01 allows remote attackers to execute arbitrary SQL commands via the click parameter...

CVE-2010-0967: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to 1 colorvoid/footer.php, 2 default-green/footer.php, 3...

GeekHelps ADMP v1.01 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================= GeekHelps ADMP v1.01 Multiple Vulnerabilities ============================================= local file include / sql injection Author: ItSecTeam download from:http://geekhelps.net/download.php...

GeekHelps ADMP 1.01 - Multiple Vulnerabilities

GeekHelps ADMP 1.01 - Multiple Vulnerabilities local file include / sql injection Author: ItSecTeam download from:http://geekhelps.net/download.php script:ADMP remote:yes dork::D lfi vul1:/path/themes/colorvoid/footer.php include"./themes/$style/info.php"; ? line 3...

GeekHelps ADMP 1.01 - Multiple Vulnerabilities

local file include / sql injection Author: ItSecTeam download from:http://geekhelps.net/download.php script:ADMP remote:yes dork::D lfi vul1:/path/themes/colorvoid/footer.php include"./themes/$style/info.php"; ? line 3 vuls:themes/default-green/footer.php themes/default-orange/footer.php...