CVE-2006-3266

Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 header parameter to a conad/include/rootGui.inc.php and b include/rootGui.inc.php; 2 mysqlCall parameter to...

CVE-2006-3266

Bee-hive Lite 1.2 and earlier is affected by multiple PHP remote file inclusion vulnerabilities when register_globals is enabled. The weaknesses allow an attacker to execute arbitrary PHP code by supplying URLs in various parameters across several scripts, including header, mysqlCall, mysqlcall, ...

CVE-2006-3266: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 header parameter to a conad/include/rootGui.inc.php and b include/rootGui.inc.php; 2 mysqlCall parameter to...

CVE-2006-3037

Multiple cross-site scripting XSS vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 description, 3 article, 4 bio, and 5 name parameters...

CVE-2006-3037

ST AdManager Lite (publish.php) has multiple XSS vulnerabilities disclosed, allowing remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, (3) article, (4) bio, and (5) name parameters. The description specifies the affected software/component and the vulnera...

CVE-2006-3037: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 description, 3 article, 4 bio, and 5 name parameters...

Sql injection

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

CVE-2006-2973

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

CVE-2006-2973

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

CVE-2006-2973

CVE-2006-2973 involves multiple SQL injection vulnerabilities in month.php of PHP Lite Calendar Express 2.2 . The issue allows remote attackers to execute arbitrary SQL commands via the (1) and (2) parameters, potentially affecting the application’s database through the affected page. The CVSS ...

CVE-2006-2973: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

ST AdManager Lite v1

ST AdManager Lite v1 Homepage: http://www.site-trade.com/index.php Effected files: index.php submit.php input form XSS Vulnerabilities: submit.php input forms do not correctly sanatize user input before submitting it to be checked by an admin and then published. This in turn to allow a user to...

CVE-2006-2871

PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter. NOTE: CVE disputes this issue, since $scriptpath is set to a constant value...

PT-2006-3789 · Cyboards · Cyboards Php Lite

Name of the Vulnerable Software and Affected Versions: CyBoards PHP Lite version 1.25 Description: A remote file inclusion issue exists due to the script path parameter in include/common.php, potentially allowing remote attackers to execute arbitrary PHP code via a URL. Recommendations: For...

CyBoards PHP Lite v1.25 (common.PHP) Remote File Inclusion

CyBoards PHP Lite v1.25 common.PHP Remote File Inclusion Credit : SpC-x | The-BeKiR Site : http://wWw.SaVSaK.CoM Greetz : | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/include/common.php?scriptpath=CmdShell Common.PHP :...

CVE-2006-2871: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter. NOTE: CVE disputes this issue, since $scriptpath is set to a constant value...

CyBoards PHP Lite 1.211.25 - Common.php Remote File Inclusion

CyBoards PHP Lite 1.211.25 - Common.php Remote File Inclusion source: https://www.securityfocus.com/bid/18272/info CyBoards PHP Lite is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it...

CyBoards PHP Lite 1.21/1.25 - 'Common.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/18272/info CyBoards PHP Lite is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the...

Remote file inclusion

PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when registerglobals and magicquotes are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 index.php and 2 inc-common.php...

CVE-2006-2681

PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when registerglobals and magicquotes are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 index.php and 2 inc-common.php...