ActiveKB KnowledgeBase - 'Panel' Local File Inclusion

o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : ActiveKB Knowledgebase version X.X | | Vendor :...

Unrestricted file upload

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase aphpkb 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php...

CVE-2008-6513

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase aphpkb 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php...

CVE-2008-6513

CVE-2008-6513 affects Andy's PHP Knowledgebase (aphpkb) version 0.92.9, where an unrestricted file upload in saa.php enables remote code execution by uploading a file with an executable extension and accessing it via a link listed by authors.php. The NVD entry cites a CVSSv2 base score of 6.8 (Me...

CVE-2008-6513: Improper Control of Generation of Code

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase aphpkb 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php...

Andy's PHP Knowledgebase 0.92.9 Arbitrary File Upload Vulnerability

No description provided by source. ============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

andysphpkb-upload.txt

============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Andys PHP KnowledgeBase 0.92.9 - Arbitrary File Upload

Andys PHP KnowledgeBase 0.92.9 - Arbitrary File Upload ============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Andy's PHP KnowledgeBase 0.92.9 - Arbitrary File Upload

============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

ASPapp KnowledgeBase (catid) Remote SQL Injection Vulnerability

No description provided by source. Dork - contentbycat.asp?contentid ''catid'' Exploit : contentbycat.asp?contentid=99999999&catid=-99887766 UNION SELECT 0,null,password,3,accesslevel,5,null,7,null,username from users Exploit 2 : contentbycat.asp?contentid=-99999999&catid=-99887766 union select...

ASPapp KnowledgeBase (catid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== ASPapp KnowledgeBase catid Remote SQL Injection Vulnerability =============================================================== Dork - contentbycat.asp?contentid ''catid'' Explo...

PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities

No description provided by source. PHPKB Knowledge Base Software v1.5 Professional email.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected]...

CVE-2008-3100

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...

CVE-2008-3100

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...

CVE-2008-3359

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-3359: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-3100: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...

PHP KnowledgeBase Script 2.4 (cat_id) SQL Injection Vulnerability

No description provided by source. PROUD TO BE MUSLIM Remote SQL Injection Vulnerability Knowledge Base Software Overview index.php catid AuTh0r : S.L TEAM FA6@L 3RROR --- H3B@R13H H0ME : WwW.MALAKSOFT.CoM Script : Knowledge Base Software Overview site : www.kblance.com -:: SQL ::- www.site.com/...

PHP KnowledgeBase Script 2.4 - cat_id SQL Injection

PHP KnowledgeBase Script 2.4 - catid SQL Injection PROUD TO BE MUSLIM Remote SQL Injection Vulnerability Knowledge Base Software Overview index.php catid AuTh0r : S.L TEAM FA6@L 3RROR --- H3B@R13H H0ME : WwW.MALAKSOFT.CoM Script : Knowledge Base Software Overview site : www.kblance.com -:: SQL ::...

PHP KnowledgeBase Script 2.4 (cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHP KnowledgeBase Script 2.4 catid SQL Injection Vulnerability ================================================================= PROUD TO BE MUSLIM Remote SQL Injection...