Orca 2.0/2.0.2 - 'params.php?gConf[dir][layouts]' Remote File Inclusion

Orca - Interactive Forum Script Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download :...

Orca 2.0/2.0.2 (params.php) Remote File Inclusion Vulnerability

No description provided by source. Orca - Interactive Forum Script Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download :...

Orca 2.0/2.0.2 (params.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== Orca 2.0/2.0.2 params.php Remote File Inclusion Vulnerability =============================================================== Orca - Interactive Forum Script Remote File...

CVE-2005-3942

CVE-2005-3942 pertains to Orca Knowledgebase, affected in version 2.1b and earlier. The vulnerability is a SQL injection in the knowledgebase-control.php component, exploited via the qid parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents do not provide...

CVE-2005-3941

Orca Blog 1.3b and earlier is vulnerable to an SQL injection in blog.php, exploitable via the msg parameter to execute arbitrary SQL. Affected: Orca Blog (1.3b and earlier). Root cause: improper handling of user input in msg. Impact: partial confidentiality/integrity/availability per CVSS, base s...

CVE-2005-3940

CVE-2005-3940 affects Orca Ringmaker and specifically the vulnerable script ringmaker.php in version 2.3c and earlier. The underlying issue is a SQL injection that allows remote attackers to execute arbitrary SQL commands through the start parameter. The description (from NVD and CVE records) sta...

CVE-2005-3940

SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter...

CVE-2005-3941

SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter...

CVE-2005-3942

SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter...

CVE-2005-3941

SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter...

CVE-2005-3940

SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter...

CVE-2005-3942

SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter...

Orca Blog 1.3 - blog.php SQL Injection

Orca Blog 1.3 - blog.php SQL Injection source: https://www.securityfocus.com/bid/15638/info Orca Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation cou...

Orca Ringmaker 2.3 - Ringmaker.php SQL Injection

Orca Ringmaker 2.3 - Ringmaker.php SQL Injection source: https://www.securityfocus.com/bid/15639/info Orca Ringmaker is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Orca Blog SQL inj. vuln.

Orca Blog SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/orca-blog-sql-inj-vuln.html Vendor:http://www.greywyvern.com/orcablog affected version:1.3b and prior Product Description: The Orca Blog is a free and simple blogging system...

Orca KnowledgeBase 2.1 - KnowledgeBase.php SQL Injection

Orca KnowledgeBase 2.1 - KnowledgeBase.php SQL Injection source: https://www.securityfocus.com/bid/15637/info Orca Knowledgebase is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Orca Knowledgebase SQL vuln.

Orca Knowledgebase SQL vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/orca-knowledgebase-sql-vuln.html Vendor:http://www.greywyvern.com/orcaknow affected version: 2.1b and prior Product Description: The Orca Knowledgebase is the simplest way...

Orca Ringmaker SQL inj. vuln.

Orca Ringmaker SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/orca-ringmaker-sql-inj-vuln.html Vendor:http://www.greywyvern.com/orcaring affected version: 2.3c and prior Product Description: The Orca Ringmaker allows you to host a...

Orca Blog 1.3 - 'blog.php' SQL Injection

source: https://www.securityfocus.com/bid/15638/info Orca Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Orca KnowledgeBase 2.1 - 'KnowledgeBase.php' SQL Injection

source: https://www.securityfocus.com/bid/15637/info Orca Knowledgebase is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of t...