EUVD-2006-6737

Malware in sbrugna...

EUVD-2006-6738

Malware in sbrugna...

EUVD-2006-6739

Malware in sbrugna...

EUVD-2006-7214

Malware in sbrugna...

Ixprim CMS 1.2 - Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Poc.ID........: 16061221 Type..........: Blind SQL Injection Risk.level....: Medium Conditions....: loadfile privilege ixp code only Src.download..: www.ixprim-cms.org Poc.link......:...

CVE-2006-7237

PHP remote file inclusion vulnerability in mod/ncphpmyadmin/core/libraries/ThemeManager.class.php in Ixprim 2.0 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-7237

PHP remote file inclusion vulnerability in mod/ncphpmyadmin/core/libraries/ThemeManager.class.php in Ixprim 2.0 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-7237

The CVE-2006-7237 entry describes a PHP remote file inclusion vulnerability in Ixprim 2.0, specifically in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php. The underlying issue is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code via a URL supplied in an u...

CVE-2006-7237: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in mod/ncphpmyadmin/core/libraries/ThemeManager.class.php in Ixprim 2.0 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6754

Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the storyid parameter to ixmixpnews.php, and unspecified other vectors...

CVE-2006-6755

Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprimapi.php, which reveals the path in an error message...

CVE-2006-6756

The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXPCODE in mainfile.php, which might allow remote attackers to gain access to the administration panel via a brute force attack...

CVE-2006-6755

CVE-2006-6755 affects Ixprim 1.2 and allows remote information disclosure via a direct request to kernel/plugins/fckeditor2/ixprim_api.php, where an error message reveals the filesystem path. The vulnerability is described as an information disclosure; no exploit details, affected versions, root ...

CVE-2006-6754

CVE-2006-6754 involves multiple SQL injection vulnerabilities in Ixprim 1.2. An attacker can remotely execute arbitrary SQL commands via the story_id parameter to ixm_ixpnews.php and other vectors. The available sources consistently name Ixprim 1.2 and these vectors but do not provide a patched f...

CVE-2006-6756

The vulnerability concerns Ixprim 1.2. The code function in install.fct.php generates a guessable value for the confidential IXP_CODE stored in mainfile.php, which could allow remote attackers to brute-force access to the administration panel. The available documentation links this to a remote-ex...

CVE-2006-6756

The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXPCODE in mainfile.php, which might allow remote attackers to gain access to the administration panel via a brute force attack...

CVE-2006-6754

Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the storyid parameter to ixmixpnews.php, and unspecified other vectors...

CVE-2006-6755

Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprimapi.php, which reveals the path in an error message...

CVE-2006-6754: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the storyid parameter to ixmixpnews.php, and unspecified other vectors...

CVE-2006-6756: Undefined Security Weakness

The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXPCODE in mainfile.php, which might allow remote attackers to gain access to the administration panel via a brute force attack...