Sql injection

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

CVE-2007-2009

PHP remote file inclusion vulnerability in index.php in SimpCMS Light 04.10.2007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site parameter...

CVE-2007-2009

PHP remote file inclusion vulnerability in index.php in SimpCMS Light 04.10.2007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site parameter...

CVE-2007-2009

CVE-2007-2009 affects SimpCMS Light 04.10.2007 and earlier; PHP remote file inclusion in index.php allows remote attackers to execute arbitrary PHP code via a URL supplied in the site parameter. The CVSS base score is 6.8 (Medium). References indicate public exploit activity; remediation details ...

CVE-2007-2009: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in SimpCMS Light 04.10.2007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site parameter...

simpcmslight-rfi.txt

Bug Found By Dr.RoVeR --Arab48 Hacker Contact: [email protected] --- Script: SimpCMS Light Download: http://www.simpcms.com/light/normal/simp-cms-light.zip -- Bug File: index.php Bug code in line 31: include $site.".php"; -- Exploit: http://site.com/path/index.php?site=EvilScript --...

SimpCMS 04.10.2007 - site Remote File Inclusion

SimpCMS 04.10.2007 - site Remote File Inclusion Bug Found By Dr.RoVeR --Arab48 Hacker Contact: [email protected] --- Script: SimpCMS Light Download: http://www.simpcms.com/light/normal/simp-cms-light.zip -- Bug File: index.php Bug code in line 31: include $site.".php"; -- Exploit:...

Light Blog Remote Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web applications ================================================== Light Blog Remote Multiple Vulnerabilities Exploit ================================================== !/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and...

CVE-2006-4596

PHP remote file inclusion in MyBace Light Skrip, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the 1 hauptverzeichniss parameter in includes/logincheck.php and the 2 templateback parameter in admin/login/content/userdaten.php...

CVE-2006-4596: Undefined Security Weakness

PHP remote file inclusion in MyBace Light Skrip, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the 1 hauptverzeichniss parameter in includes/logincheck.php and the 2 templateback parameter in admin/login/content/userdaten.php...

CVE-2006-4596

CVE-2006-4596 affects MyBace Light Skrip (PHP). The vulnerability is a PHP remote file inclusion that occurs when register_globals is enabled, allowing an attacker to trigger code execution via the hauptverzeichniss parameter in includes/login_check.php or the template_back parameter in admin/log...

CVE-2006-4596

PHP remote file inclusion in MyBace Light Skrip, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the 1 hauptverzeichniss parameter in includes/logincheck.php and the 2 templateback parameter in admin/login/content/userdaten.php...

mybaseLight.txt

+-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...

MyBace Light (hauptverzeichniss) Remote File Inclusion

+-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...

MyBace Light (hauptverzeichniss) Remote File Inclusion

+-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...

MyBace Light - login_check.php Remote File

MyBace Light - logincheck.php Remote File +-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...

MyBace Light (login_check.php) Remote File Vulnerability

Exploit for unknown platform in category web applications ======================================================== MyBace Light logincheck.php Remote File Vulnerability ======================================================== +-------------------------------------------------------------------- +...

MyBace Light - 'login_check.php' Remote File

+-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...

MyBace Light (login_check.php) Remote File Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...

CVE-2006-3758: Undefined Security Weakness

inc/init.php in Archive Mode Light in MyBB aka MyBulletinBoard 1.1.4 calls the extract function with EXTROVERWRITE on HTTP POST and GET variables, which allows remote attackers to overwrite arbitrary variables, as demonstrated via an SQL injection using the SERVERHTTPCLIENTIP parameter in...