7215 matches found
CVE-2006-5126
Affects PowerPortal 1.3a (John Himmelman). The PHP remote file inclusion vulnerability in index.php allows remote attackers to execute arbitrary PHP code via a URL in the file_name[] parameter. The issue is classified with a NVD base score of 7.5 (HIGH) and impacts confidentiality, integrity, and...
CVE-2006-5120
Multiple cross-site scripting XSS vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 index.php and 2 processlogin.php...
CVE-2006-5097
CVE-2006-5097 concerns net2ftp (version range ~0.1–0.62) and a PHP remote file inclusion in index.php via the application_rootdir parameter, potentially allowing arbitrary PHP code execution. The vulnerability is linked to this parameter, but it has been disputed by a third‑party researcher and b...
PowerPortal 1.3a - index.php Remote File Inclusion
PowerPortal 1.3a - index.php Remote File Inclusion ============================================================================================== PowerPortal Remote File Include =============================================================================================== Critical Level :...
PT-2006-5835 · Net2Ftp · Net2Ftp
Name of the Vulnerable Software and Affected Versions: net2ftp versions 0.1 through 0.62 Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via a URL in the application rootdir parameter. However, this issue has been disputed by a...
PowerPortal 1.3a (index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== PowerPortal Remote File Include =============================================================================================== Critical Level : Dangerous scripts:...
CVE-2006-5064
Multiple cross-site scripting XSS vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 entryid parameter in comment.php, 2 page parameter in index.php, or the 3 uid parameter in user.php. NOTE: the provenance of this information is...
CVE-2006-5068
This CVE (CVE-2006-5068) is a PHP remote file inclusion vulnerability in Brudaswen’s admin/index.php for BrudaNews 1.1 and earlier and BrudaGB 1.1 and earlier. The flaw allows a remote attacker to execute arbitrary PHP code by supplying a URL in the o parameter, enabling unauthenticated, network‑...
CVE-2006-5021
Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the root parameter in imgen.php, and the rootpath parameter in 2 admin/config.php, 3 common.php, and 4 admin/index.php. NOTE: the provenance of this...
PT-2006-5762 · Redgun · Redblog
Name of the Vulnerable Software and Affected Versions: redgun RedBLoG version 0.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in several parameters, including the root parameter in "imgen.php", and the root path parameter in "admin/config.php",...
BrudaGB <= v1.1 (o) Remote File Inclusion Exploit
============================================================================================== BrudaGB = v1.1 o Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...
CVE-2006-4967
Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...
CVE-2006-4967
Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...
BrudaGB 1.1 - adminindex.php Remote File Inclusion
BrudaGB 1.1 - adminindex.php Remote File Inclusion ============================================================================================== BrudaGB ================================================================================================ Exploit : --------------------------------...
BirdBlog 1.x - index.php?page Cross-Site Scripting
BirdBlog 1.x - index.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20202/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary...
BrudaNews 1.1 - '/admin/index.php' Remote File Inclusion
============================================================================================== BrudaNews ================================================================================================ Exploit : -------------------------------- http://sitename.com/Script...
BrudaGB <= 1.1 (admin/index.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== BrudaGB ==============================================================================================...
BrudaGB <= 1.1 (admin/index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== BrudaGB = v1.1 o Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangero...
BrudaNews <= 1.1 (admin/index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== BrudaNews = v1.1 o Remote File Inclusion Exploit =============================================================================================== Critical Level :...
CVE-2006-4960
The CVE-2006-4960 entry describes a cross-site scripting (XSS) vulnerability in Php Blue Dragon 2.9.1 and earlier, exploitable via the m parameter. The issue is reflected in an error message generated by a failed SQL query, indicating that user-supplied input can be echoed back to the browser in ...