551 matches found
php security update
CentOS Errata and Security Advisory CESA-2006:0669 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
modulebased.txt
+ModuleBased CMSMBCMS multiple remote file Inclusion +discripton:MBCMS ModuleBased CMS is a new CMS designed for ease of use and customability. It is designed +for PHP/MySQL and it is easy to write new modules or templates to suit a particular website. +version:alfa 1 +vendor...
Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability
------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....
CVE-2006-3965
Banex PHP MySQL Banner Exchange 2.21 stores lib.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as database usernames and passwords...
CVE-2006-3965
Banex PHP MySQL Banner Exchange 2.21 stores lib.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as database usernames and passwords...
CVE-2006-3963
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the 1 sitename parameter to a signup.php, and the 2 id, 3 deleteuserbanner, 4 viewmem, 5 viewmemunb, 6 viewunmem,or 7 deleteuser parameters to b admin.php...
CVE-2006-3964
PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfgroot parameter...
Banex PHP MySQL Banner Exchange 2.21 - members.php?cfg_root Remote File Inclusion
Banex PHP MySQL Banner Exchange 2.21 - members.php?cfgroot Remote File Inclusion source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize...
Banex PHP MySQL Banner Exchange 2.21 - 'signup.php?site_name' SQL Injection
source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the SQL-injection vulnerabilities to...
CVE-2006-3330
Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...
CVE-2006-3330
The CVE-2006-3330 entry describes a Cross-site Scripting (XSS) vulnerability in AddAsset1.php of PHP/MySQL Classifieds (PHP Classifieds). The weakness allows remote attackers to influence the application via the ProductName (Title), url, and Description parameters, potentially related to issues i...
CVE-2006-3329
The CVE-2006-3329 entry concerns a SQL injection in search.php of PHP/MySQL Classifieds (PHP Classifieds). The vulnerability is exploitable via the rate parameter, potentially affecting data confidentiality, integrity, and availability as indicated by CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:P/...
CVE-2006-3329
SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...
CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability
Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, they could be exploited by users to retrieve the...
CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== CosmicShoppingCart search.php Remote SQL Injection Vulnerability ================================================================== Software: CosmicShoppingCart...
CVE-2006-2042
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...
Sql injection
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...
CVE-2006-2042
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...
Clansys 1.1 (showid) - SQL Injection
Internet Security | |---==============================================================---| title: clansys 1.1 remote sql injection release: 2006-04-10 author: snatcher snatcher at gmx.ch country: switzerland |+| application: clansys 1.1 description: a php / mysql based clan content management...