PHP-Nuke <= 8.0 Cookie Manipulation (lang)

///////////////////////////////////////////////////////////////////////////////////////////////////// PHPNuke = 8.0 Cookie Manipulation lang PROGRAM: PHP-Nuke HOMEPAGE: http://phpnuke.org/ VERSION: All version BUG: Cookie Manipulation lang SQL Injection + Local file include AUTHOR: Aleksandar aka...

Magic CMS 4.2.747 - mysave.php Remote File Inclusion

Magic CMS 4.2.747 - mysave.php Remote File Inclusion '/ -.- ---------------------oOO------OOo--------------------- | Magic CMS v4.2.747 mysave.php Remote File Inclusion | | works only with registerglobals = on | | coded by DNX | --------------------------------------------------------- !...

Magic CMS 4.2.747 (mysave.php file) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Magic CMS 4.2.747 mysave.php file Remote File Include Vulnerability ===================================================================== '/ -.-...

MS Windows (.doc File) Malformed Pointers Denial of Service Exploit

No description provided by source. / Microsoft Windows .doc File Malformed Pointers DoS &...

Magic CMS 4.2.747 - 'mysave.php' Remote File Inclusion

'/ -.- ---------------------oOO------OOo--------------------- | Magic CMS v4.2.747 mysave.php Remote File Inclusion | | works only with registerglobals = on | | coded by DNX | --------------------------------------------------------- ! Discovered: DNX ! Vendor: www.geo-soft.net/de-ch/ ! Detected:...

CVE-2007-1293

SQL injection vulnerability in Rigter Portal System RPS 6.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI index.php, possibly related to verdescarga.php...

PT-2007-2719 · Sava · Sava'S Guestbook

Name of the Vulnerable Software and Affected Versions: Sava's Guestbook version 23.11.2006 Description: The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This is achieved by exploiting SQL injection vulnerabilities in the add2.php file via the...

PT-2007-2717 · Li · Li-Guestbook

Name of the Vulnerable Software and Affected Versions: LI-Guestbook versions 1.1 through 1.2 Description: The issue allows remote attackers to execute arbitrary SQL commands via the country parameter in the guestbook.php file when magic quotes gpc is disabled. Recommendations: For versions 1.1 an...

Microsoft Windows - .doc Malformed Pointers Denial of Service

Microsoft Windows - .doc Malformed Pointers Denial of Service /\ Microsoft Windows .doc File Malformed Pointers DoS Just move your mouse on the file and explorer crashes. If it does not try to look at file properties. Bug comes from Ole32.dll: CMP DWORD PTR DS:EAX+EBX,3 and we can set EAX, EDX an...

Rigter Portal System (RPS) 6.2 Remote Blind SQL Injection Exploit

No description provided by source. ? //RPS 6.2 SQL Injection Exploit //http://www.rps-project.com/ //Need magicquotesgpc = Off; //by s0cratex //Contact: s0cratexathotmaildotcom //Salu2: rgod, 0pt1x 'n mechas. errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; $host =...

CVE-2007-1142

Cross-site scripting XSS vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the linkparameters parameter in 1 news.php and 2 nlayouts.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the linkparameters parameter in 1 news.php and 2 nlayouts.php...

Remote file inclusion

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpscriptpath parameter. NOTE: This issue may overlap CVE-2006-0723...

CVE-2007-1141

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpscriptpath parameter. NOTE: This issue may overlap CVE-2006-0723...

CVE-2007-1142

Cross-site scripting XSS vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the linkparameters parameter in 1 news.php and 2 nlayouts.php...

CVE-2007-1141

The CVE-2007-1141 issue concerns Magic News Plus 1.0.2, where a PHP remote file inclusion vulnerability exists in preview.php. The root cause is the php_script_path parameter allowing an attacker-controlled URL to be included, enabling arbitrary PHP code execution on the server. This aligns with ...

CVE-2007-1142

Cross-site scripting XSS vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the linkparameters parameter in 1 news.php and 2 nlayouts.php...

CVE-2007-1142

CVE-2007-1142 affects Magic News Plus 1.0.2. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the link_parameters parameter in the files (1) news.php and (2) n_layouts.php, allowing remote attackers to inject arbitrary web script or HTML. The provided sources identify the af...

CVE-2007-1141

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpscriptpath parameter. NOTE: This issue may overlap CVE-2006-0723...

CVE-2007-1141: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpscriptpath parameter. NOTE: This issue may overlap CVE-2006-0723...