9879 matches found
CVE-2006-5068
PHP remote file inclusion vulnerability in admin/index.php in Brudaswen 1 BrudaNews 1.1 and earlier and 2 BrudaGB 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the o parameter...
CVE-2006-5053: Undefined Security Weakness
PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the contentpage parameter...
CVE-2006-5062: Undefined Security Weakness
PHP remote file inclusion vulnerability in templates/pb/language/langnl.php in PBLang PBL 4.66z and earlier allows remote attackers to execute arbitrary PHP code via a URL in the temppath parameter...
CVE-2006-5021
Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the root parameter in imgen.php, and the rootpath parameter in 2 admin/config.php, 3 common.php, and 4 admin/index.php. NOTE: the provenance of this...
Blog Pixel Motion 2.1.1 - PHP Code Execution Create Admin
Blog Pixel Motion 2.1.1 - PHP Code Execution Create Admin !/usr/bin/perl Affected.scr..: Blog Pixel Motion V2.1.1 Poc.ID........: 12060927 Type..........: PHP Code Execution stripslashes, SQL Injection urldecode Risk.level....: High Vendor.Status.: Unpatched Src.download..:...
CVE-2006-5021: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the root parameter in imgen.php, and the rootpath parameter in 2 admin/config.php, 3 common.php, and 4 admin/index.php. NOTE: the provenance of this...
CVE-2006-5043: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component comjoomlaboard before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 fileupload.php or 2 imageupload.php, a variant of CVE-2006-3528...
WebNews 1.4 - parser.php Remote File Inclusion (2)
WebNews 1.4 - parser.php Remote File Inclusion 2 source: https://www.securityfocus.com/bid/20239/info Web//News is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote...
Blog Pixel Motion 2.1.1 PHP Code Execution / Create Admin Exploit
Exploit for unknown platform in category web applications ================================================================= Blog Pixel Motion 2.1.1 PHP Code Execution / Create Admin Exploit ================================================================= !/usr/bin/perl Affected.scr..: Blog Pixel...
CVE-2006-5020: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter in manager/pages/ scripts including 1 AccountsPage.class.php, 2 AddInvoicePage.class.php, 3 AddIPAddressPage.class.php, 4...
Blog Pixel Motion 2.1.1 PHP Code Execution / Create Admin Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: Blog Pixel Motion V2.1.1 Poc.ID........: 12060927 Type..........: PHP Code Execution stripslashes, SQL Injection urldecode Risk.level....: High Vendor.Status.: Unpatched Src.download..: www.pixelmotion.org/zip/blog2.1.zip...
CVE-2006-5015: Undefined Security Weakness
PHP remote file inclusion vulnerability in hit.php in Kietu 3.2 allows remote attackers to execute arbitrary PHP code via an FTP URL in the urlhit parameter...
Web//News 1.4 - 'parser.php' Remote File Inclusion (2)
source: https://www.securityfocus.com/bid/20239/info Web//News is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute i...
CVE-2006-4990: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the PPPATH parameter in 1 addfav.php, 2 adm-admlog.php, 3 adm-approve.php, 4 adm-backup.php, 5 adm-cats.php, 6 adm-cinc.php, 7 adm-db.php, 8 adm-editcfg.php, 9...
CVE-2006-4995: Undefined Security Weakness
PHP remote file inclusion vulnerability in BSQ Sitestats bsqsitestats before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-4987: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a URL in the globalscontentdir parameter in 1 example-view/templates/article.php, 2 example-view/templates/root.php, and 3 example-view/templates/dateslist.php...
CVE-2006-4984: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter in 1 adminpanel/includes/mailinglist/mlistxls.php and 2 adminpanel/includes/addforms/addmp3.php. NOTE: the other vectors fro...
CVE-2006-4979
Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings...
CVE-2006-4977
Multiple unrestricted file upload vulnerabilities in 1 back/uploadimg.php and 2 admin/uploadimg.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/imgquiz folder via the a upload, b okupdate, c image, and d path parameters, possibly...
CVE-2006-4977
Multiple unrestricted file upload vulnerabilities in 1 back/uploadimg.php and 2 admin/uploadimg.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/imgquiz folder via the a upload, b okupdate, c image, and d path parameters, possibly...