4378 matches found
CVE-2006-4835
The CVE-2006-4835 entry affects Bluview Blue Magic Board (BMB)/BMForum version 5.5. The issue allows remote attackers to obtain sensitive information through direct requests to several PHP scripts (footer.php, header.php, db_mysql_error.php, langlist.php, sendmail.php, style.php). Error messages ...
CVE-2006-4835
Bluview Blue Magic Board BMB aka BMForum 5.5 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php, 2 header.php, 3 dbmysqlerror.php, 4 langlist.php, 5 sendmail.php, or 6 style.php, which reveals the path in various error messages...
CVE-2006-4823
CVE-2006-4823 is a PHP remote file inclusion vulnerability in the Reamday Enterprises Magic News Pro 1.0.3 and earlier . The flaw allows an attacker to execute arbitrary PHP code via a URL supplied in the script_path parameter, enabling remote code execution. The connected NVD entries confirm the...
CVE-2006-4823
PHP remote file inclusion vulnerability in scripts/newspage.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter...
Fullpath disclosure in Blue Magic Board 5.5
Blue Magic Board BMB is nice forum system written by http://bmforum.com Some file error and show fullpath. I test newest version, maybe all older versions are infected. http://domain.ext/bmbpath/footer.php http://domain.ext/bmbpath/header.php http://domain.ext/bmbpath/include/db/dbmysqlerror.php...
CVE-2006-4823: Undefined Security Weakness
PHP remote file inclusion vulnerability in scripts/newspage.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter...
CVE-2006-4835: Undefined Security Weakness
Bluview Blue Magic Board BMB aka BMForum 5.5 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php, 2 header.php, 3 dbmysqlerror.php, 4 langlist.php, 5 sendmail.php, or 6 style.php, which reveals the path in various error messages...
Magic News Pro <= 1.0.3 (script_path) Remote File Include Vulnerability
No description provided by source. ==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz...
Magic News Pro <= 1.0.3 (script_path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Magic News Pro 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi...
CCleague Pro 1.0.1RC1 - 'cookie' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:...
pHNews alpha 1 - 'templates_dir' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:...
PHP-Proxima 6.0 - 'BB_Smilies.php' Local File Inclusion
source: https://www.securityfocus.com/bid/19840/info PHP-Proxima is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary local files from the vulnerable system in the context of the...
phpGroupWare <= 0.9.16.010 GLOBALS[] Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================== phpGroupWare calendar/inc/class.holidaycalc.inc.php line 14-33: .... / $Id: class.holidaycalc.inc.php,v 1.5 2001/08/26 12:32:28 skeeter Exp $ / if...
sendcard_340_xpl.txt
!/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardless of php.ini settings\n"; echo " and if you succeed ...
Owl Intranet Engine <= 0.91 Multiple Vulnerabilities
The remote host is running Owl Intranet Engine, a web-based document management system written in PHP. The version of Owl Intranet Engine on the remote host fails to sanitize input to the session id cookie before using it in a database query. Provided PHP's 'magicquotesgpc' setting is disabled, a...
MyBloggie 2.1.4 - trackback.php Multiple SQL Injections
MyBloggie 2.1.4 - trackback.php Multiple SQL Injections !/usr/bin/php -q -d shortopentag=on = 4.1 allowing subs / if $argctrackbackreply1, "Sorry, Trackback failed.. Reason : No title"; if!empty$REQUEST'url' $url=urldecode$REQUEST'url'; if validateurl$url==false $tback-trackbackreply1, "Sorry,...
[Full-disclosure] CounterChaos <= 0.48c SQL Injection Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: CounterChaos = 0.48c SQL Injection Vulnerability Release Date: 2006/08/04 Last Modified: 2006/08/03 Author: Tamriel tamriel at gmx dot net Application: CounterChaos = 0.48c Risk: Moderate Vendor Status: not contacted Vendor Site:...
Apple iOS MobileSafari LibTIFF Buffer Overflow
This module exploits a buffer overflow in the version of libtiff shipped with firmware versions 1.00, 1.01, 1.02, and 1.1.1 of the Apple iPhone. iPhones which have not had the BSD tools installed will need to use a special payload. Module Options msf use exploit/apple/ios/browser/safarilibtiff ms...
[KAPDA::#46] - AjaxPortal Authentication Bypass
KAPDA New advisory Vendor: http://myiosoft.com Vulnerable: AjaxPortal v. 3.0 Bug: Sql Injection Authentication Bypass Exploitation: Remote with browser Description: -------------------- AjaxPortal is based on Sajax technology - an open source tool to make programming websites using the Ajax...
security flaw
PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by...