CVE-2006-4086

Cross-site scripting XSS vulnerability in index.php in Elaine Aquino Online Zone Journals OZJournals 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-4069

Multiple cross-site scripting XSS vulnerabilities in Elaine Aquino Online Zone Journals OZJournals 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 m and 2 c parameters in index.php, 3 a search action, and 4 a "submit comment" action...

YaBBSE 1.x - index.php Cross-Site Scripting

YaBBSE 1.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19460/info A cross-site scripting vulnerability affects YaBBSE because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may...

SaveWebPortal <= 3.4(page) Remote File Inclusion Vulnerability

-------------------------------------------- SaveWebPortal = 3.4page Remote File Inclusion Vulnerability Download:http://www.circeos.it/frontend/theme4/index.php?page=downloads -------------------------------------------- Found by x0rax [email protected]...

CVE-2006-4061

CVE-2006-4061 describes a PHP remote file inclusion in phpPrintAnalyzer 1.1 (index.php) exploitable when register_globals is enabled, by passing a URL in rep_par_rapport_racine. The vulnerability is tied to a PHP RFI via a parameter; impact is described as partial confidentiality, integrity and a...

PT-2006-4905 · Php · Phpprintanalyzer

Name of the Vulnerable Software and Affected Versions: phpPrintAnalyzer version 1.1 Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code when register globals is enabled. This is achieved via a URL in the rep par rapport racine parameter...

CVE-2006-4043

index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message...

CVE-2006-4043

CVE-2006-4043 affects myWebland myBloggie 2.1.4 and earlier. The issue allows remote attackers to obtain sensitive information by crafting a query that only specifies the viewdate mode, causing an SQL error message that reveals the table prefix. This is a data disclosure vulnerability in the appl...

CVE-2006-4047

CVE-2006-4047 affects Netious CMS 0.4 and earlier. The vulnerability is a SQL injection in index.php via the username parameter, enabling remote execution of arbitrary SQL commands. The linked records also reference a variant described for Netious CMS 0.4, with the root cause being improper input...

CVE-2006-3584

CVE-2006-3584 affects Jetbox CMS 2.1 SR1. The vulnerability is in index.php where inputs passed in the URL are evaluated as PHP variable variables, allowing remote attackers to overwrite configuration variables. This is caused by improper handling/sanitization of URL parameters and can lead to di...

phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability

--------------------------------------------------------------------------------------- phpPrintAnalyzer 1.1 repparrapportracine Remote File Inclusion --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/04/27 Location : Iran - Tehran...

CVE-2006-4008

The CVE-2006-4008 entry concerns Knusperleicht Faq 1.0, where a PHP remote file inclusion flaw allows an attacker to cause arbitrary PHP code execution via a URL supplied in the faq_path parameter. This describes a network-accessible vulnerability in index.php that can be triggered by crafting th...

CVE-2006-3991

PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter...

OZJournal v1.5 - XSS

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

NewsLetter v3.5 <= (NL_PATH) Remote File Inclusion Exploit

================================================================= NewsLetter v3.5 = NLPATH Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://wolfsecurity.org | | Version : 3.5 | |...

SQL-Injection in site@x

Advisory: SQL-Injection in site@x all version Home Page: http://x.cms.ru Уязвимость /Vulnerability: SQL-injection Уязвимый скрипт/Vulnerable script: index.php http://www.ncb.ru/index.php?serverid=root&objid=461SQL Copyright © Cyber Lords Community www.cyberlords.net...

Voodoo chat 1.0RC1b - file_path Remote File Inclusion

Voodoo chat 1.0RC1b - filepath Remote File Inclusion ================================================================= Voodoo chat 1.0RC1b ================================================================= Exploit : -------------------------------- http://sitename.com/Script...

Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= Voodoo chat 1.0RC1b = filepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://vochat.com/ | |...

Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Voodoo chat ================================================================= Exploit : -------------------------------- http://sitename.com/Script...

k_fileManager &lt;= 1.2 (dwl_include_path) Remote Inclusion Vulnerability

No description provided by source. ================================================================= KfileManager v1.2 = dwlincludepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site :...