14 matches found
EUVD-2006-7098
Malware in sbrugna...
EUVD-2006-7099
Malware in sbrugna...
kubix <= 0.7 - Multiple Vulnerabilities exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc Related: path of the file to include\r\n"; echo " |- Es: php ".$argv0." localhost /kubix/ 1 ../../../../../etc/passwd\r\n\r\n"; echo " 2 -...
CVE-2006-7116
SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the memberid parameter $id variable to index.php...
CVE-2006-7116
SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the memberid parameter $id variable to index.php...
CVE-2006-7117
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to 1 include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and 2 read arbitrary files via ".." sequences in the...
CVE-2006-7117
CVE-2006-7117 affects Kubix 0.7 and earlier. The vulnerabilities are directory traversal flaws where an attacker can cause local file inclusion via ".." sequences in the theme cookie passed to index.php (handled by includes/head.php) and arbitrary file read via ".." in the file parameter of add_d...
CVE-2006-7116
Kubix 0.7 and earlier are affected by a SQL injection in includes/functions.php. The vulnerability is exploitable via the member_id parameter ($id variable) to index.php, enabling remote attackers to execute arbitrary SQL commands and bypass authentication. This is supported by multiple sources (...
CVE-2006-7116: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the memberid parameter $id variable to index.php...
CVE-2006-7117: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to 1 include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and 2 read arbitrary files via ".." sequences in the...
Kubix <= 0.7 Multiple Remote Vulnerabilities Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "\r\n"; echo "Kubix =0.7 Multiple Vulnerabilities Exploit\r\n"; echo "Site: http://www.kubixproject.net\r\n"; echo "Dork: Powered by: Kubix\r\n"; echo "by BlackHawk [email protected]\r\n"; echo "Thanks to rgod for th...
kubix 0.7 - Multiple Vulnerabilities
kubix 0.7 - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc Related: path of the file to include\r\n"; echo " |- Es: php ".$argv0." localhost /kubix/ 1 ../../../../../etc/passwd\r\n\r\n"; echo " 2 ...
Kubix <= 0.7 Multiple Remote Vulnerabilities Exploit
Exploit for unknown platform in category web applications ==================================================== Kubix Related: path of the file to include\r\n"; echo " |- Es: php ".$argv0." localhost /kubix/ 1 ../../../../../etc/passwd\r\n\r\n"; echo " 2 - Login Bypass PoC\r\n"; echo " |- Related:...
kubix 0.7 - Multiple Vulnerabilities
!/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc Related: path of the file to include\r\n"; echo " |- Es: php ".$argv0." localhost /kubix/ 1 ../../../../../etc/passwd\r\n\r\n"; echo " 2 - Login Bypass PoC\r\n"; echo " |-...