CVE-2005-4198

CVE-2005-4198 describes a SQL injection vulnerability in Netref 3.0’s index.php, exploitable via the cat parameter to execute arbitrary SQL commands remotely. The issue’s provenance is unspecified, as notes indicate the details were obtained from third‑party sources. The NVD entry lists a CVSS v2...

CVE-2005-4198

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

CVE-2005-4198: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

Netref Cat_for_gen.PHP Remote PHP Script Injection Vulnerability

There is a vulnerability in the installed version of Netref that enables a remote attacker to pass arbitrary PHP script code through the SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Netref cat_for_gen.php Arbitrary PHP Command Injection

The remote host is running the Netref directory script, written in PHP. There is a vulnerability in the installed version of Netref that enables a remote attacker to pass arbitrary PHP script code through the 'ad', 'addirect', and 'mforracine' parameters of the 'catforgen.php' script. This code...

CVE-2005-1222

catforgen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the addirect parameter to reference catforgen.php, then including the code in the mforracine parameter, which is then written to catforgen.php...

CVE-2005-1222

CVE-2005-1222 : Netref cat_for_gen.php remote PHP script injection vulnerability in Annuaire Netref 4.2. The vulnerability allows an attacker to cause arbitrary PHP code execution by supplying PHP code via ad_direct and including it through m_for_racine, which is then written into cat_for_gen.php...

CVE-2005-1222: Undefined Security Weakness

catforgen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the addirect parameter to reference catforgen.php, then including the code in the mforracine parameter, which is then written to catforgen.php...

Annuaire Netref v4.2 [ fwrite php ] vulnerability

Software: annuaire netref version : 4.2 url : http://www.netref.net Risk factor : critical Vendor has been contacted Description: ----------- Netref is a PHP/MySQL-based directory script that supports an unlimited number of categories and links. Many fonctions to manage the links : Fast search...

Netref 4.2 - Cat_for_gen.php Remote PHP Script Injection

Netref 4.2 - Catforgen.php Remote PHP Script Injection source: https://www.securityfocus.com/bid/13275/info A remote PHP script injection vulnerability affects Netref. This issue is due to a failure of the application to sanitize user-supplied data. An attacker may leverage this issue to execute...

Netref 4.2 - 'Cat_for_gen.php' Remote PHP Script Injection

source: https://www.securityfocus.com/bid/13275/info A remote PHP script injection vulnerability affects Netref. This issue is due to a failure of the application to sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary PHP script code in the context of an affected...