9879 matches found
CVE-2006-4721
Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the language Cookie parameter, as demonstrated by executing PHP code via a log file...
CVE-2006-4722
PHP remote file inclusion vulnerability in Open Bulletin Board OpenBB 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 index.php and possibly 2 collector.php...
CVE-2006-4722: Undefined Security Weakness
PHP remote file inclusion vulnerability in Open Bulletin Board OpenBB 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 index.php and possibly 2 collector.php...
Update Protection against MiniBB Remote File Vulnerabilities
MiniBB is a free forum software, an original PHP message board script that a user can build online community on. Vulnerabilities in MiniBB Forum may allow a remote attacker to execute arbitrary PHP code via a specially crafted URL...
CVE-2006-4716: Undefined Security Weakness
PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board FSB RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter...
CVE-2006-4723: Undefined Security Weakness
PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when registerglobals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter...
CVE-2006-4713: Undefined Security Weakness
PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...
RaidenHTTPD SoftParserFileXml Parameter Remote File Inclusion
Binary data 3740.prm...
phpbb -- NULL byte injection vulnerability
Secunia reports: ShAnKaR has discovered a vulnerability in phpBB, which can be exploited by malicious users to compromise a vulnerable system. Input passed to the "avatarpath" parameter in admin/adminboard.php is not properly sanitised before being used as a configuration variable to store avatar...
CVE-2006-4678
PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the NEAbsPath parameter in 1 install.php and 2 migrateNE2toNE3.php...
CVE-2006-4678: Undefined Security Weakness
PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the NEAbsPath parameter in 1 install.php and 2 migrateNE2toNE3.php...
CVE-2002-2217: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal WSC-WebPortal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 l parameter to customize.php or the 2 pg parameter to index.php...
phpBB <= 2.0.21 (Poison NULL Byte) Remote Exploit
No description provided by source. !/usr/bin/perl -w Author: ShAnKaR Title: multiple PHP application poison NULL byte vulnerability Applications: phpBB 2.0.21, punBB 1.2.12 Threat Level: Critical Original advisory in Russian: http://www.security.nnov.ru/Odocument221.html Poison NULL byte...
CVE-2006-4677: Undefined Security Weakness
PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the REQUEST parameters were dynamically unset ...
mcGalleryPRO <= 2006 (path_to_folder) Remote Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== mcGalleryPRO = 2006 pathtofolder Remote Include Vulnerability ================================================================== SolpotCrew Community Mcgallerypro...
mcGalleryPRO <= 2006 (path_to_folder) Remote Include Vulnerability
No description provided by source. SolpotCrew Community Mcgallerypro pathtofolder Remote File Inclusion Download file : http://phpforums.net/mcgp/mcgp.zip/mcgp.zip Bug Found By :Solpot a.k.a k. Hasibuan 10-09-2006 contact: [email protected] Website :...
mcGalleryPRO 2006 - 'path_to_folder' Remote File Inclusion
SolpotCrew Community Mcgallerypro pathtofolder Remote File Inclusion Download file : http://phpforums.net/mcgp/mcgp.zip/mcgp.zip Bug Found By :Solpot a.k.a k. Hasibuan 10-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-06.txt Greetz: choi , h4ntu ,...
CVE-2006-4670: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter in 1 includes/cart.inc.php or 2 extras/extcats.php...
CVE-2006-4666: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript aka WM-News 0.5 beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 ide parameter in a article.php; or the 2 pwfile parameter in b delete.php, c modify.php, d admin.php, or e modifygo.php...
CVE-2006-4664: Undefined Security Weakness
PHP remote file inclusion vulnerability in includes/functionsportal.php in Premod Shadow 2.7.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...