Fast Click SQL Lite <= 1.1.3 Remote File Inclusion

Fast Click SQL Lite = 1.1.3 Remote File Inclusion ------------------------------------------------------- Aria-security.com advisory Bug Discovered by R@1D3N amin emami email:[email protected] and [email protected] Date:02/05/2006 original...

Fast Click SQL Lite 1.1.21.1.3 - show.php Remote File Inclusion

Fast Click SQL Lite 1.1.21.1.3 - show.php Remote File Inclusion source: https://www.securityfocus.com/bid/17819/info Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can...

Fast Click SQL Lite 1.1.2/1.1.3 - 'show.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17819/info Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

Sql injection

Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to execute arbitrary SQL commands via the 1 banner parameter in agentlinks.pl; the offset parameter in 2 agentlinks.pl, 3 agenttransactions.pl, 4...

CVE-2006-2063

Multiple cross-site scripting XSS vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in 1 agentaffil.pl, 2 agenthelp.pl, 3 agentfaq.pl, 4 agenthelpinsert.pl, 5...

CVE-2006-2063

CVE-2006-2063 involves multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1 (and likely the Network Version “Full Version”). The weaknesses allow injection of arbitrary script/HTML via the login parameter across a long list of PHP scripts (e.g., agent_affil.pl, agent...

CVE-2006-2062

CVE-2006-2062 involves multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1 (and likely the Network Version “Full Version”). The description lists specific injectable parameters across scripts: (1) banner in agent_links.pl; (2) offset in agent_links.pl; (3) agent_transactions.pl;...

Remote file inclusion

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...

CVE-2006-1959

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...

[MajorSecurity]ActualAnalyzer - Remote File Include Vulnerability

MajorSecurityActualAnalyzer - Remote File Include Vulnerability ----------------------------------------------------------- Software: ActualAnalyzer Type: Remote File Include Vulnerability Date: April, 19th 2006 Vendor: ActualScripts Page: http://actualscripts.com Risc: High Credits:...

[eVuln] CyBoards PHP Lite SQL Injection Vulnerability

New eVuln Advisory: CyBoards PHP Lite SQL Injection Vulnerability http://evuln.com/vulns/91/summary.html --------------------Summary---------------- eVuln ID: EV0091 CVE: CVE-2006-1134 Software: CyBoards PHP Lite Sowtware's Web Site:...

CyBoards PHP Lite 1.211.25 - post.php SQL Injection

CyBoards PHP Lite 1.211.25 - post.php SQL Injection source: https://www.securityfocus.com/bid/17107/info CyBoards PHP Lite is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...

CyBoards PHP Lite 1.21/1.25 - 'post.php' SQL Injection

source: https://www.securityfocus.com/bid/17107/info CyBoards PHP Lite is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise...

Sql injection

SQL injection vulnerability in CyBoards PHP Lite 1.25, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to 1 post.php and possibly 2 processpost.php...

CVE-2006-1134

SQL injection vulnerability in CyBoards PHP Lite 1.25, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to 1 post.php and possibly 2 processpost.php...

CVE-2006-1134

CyBoards PHP Lite 1.25 is affected by a SQL Injection in the post.php workflow (parameter parent) when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to craft arbitrary SQL commands, potentially impacting authentication and data integrity. Evidence from multiple sources c...

CVE-2006-1134

SQL injection vulnerability in CyBoards PHP Lite 1.25, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to 1 post.php and possibly 2 processpost.php...

EV0072.txt

New eVuln Advisory: Magic News Lite PHP Code Execution & Unauthorized Data Modification http://evuln.com/vulns/72/summary.html --------------------Summary---------------- eVuln ID: EV0072 CVE: CVE-2006-0723 CVE-2006-0724 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com...

[eVuln] Magic News Lite PHP Code Execution & Unauthorized Data Modification

New eVuln Advisory: Magic News Lite PHP Code Execution & Unauthorized Data Modification http://evuln.com/vulns/72/summary.html --------------------Summary---------------- eVuln ID: EV0072 CVE: CVE-2006-0723 CVE-2006-0724 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com...

[eVuln] Magic Calendar Lite Authentication Bypass

New eVuln Advisory: Magic Calendar Lite Authentication Bypass http://evuln.com/vulns/71/summary.html --------------------Summary---------------- eVuln ID: EV0071 CVE: CVE-2006-0673 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com Software: Magic Calendar Lite Sowtware's Web...