CVE-2007-1141: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpscriptpath parameter. NOTE: This issue may overlap CVE-2006-0723...

simplog-0.9.3.1.txt

Softare: Simplog www.simplog.org version:0.9.3.1 i assume others as well There are a few sql injections available with this software. This one is in preview.php eg. http://site/preview.php?blogid=2&adm=tem&tid=-1%20union%20select%20password%20from%20blogusers%20where%20name='insert username here'...

SQL Injection simplog

Softare: Simplog www.simplog.org version:0.9.3.1 i assume others as well There are a few sql injections available with this software. This one is in preview.php eg. http://site/preview.php?blogid=2&adm=tem&tid=-120union20select20passw ord20from20blogusers20where20name='insert username here'...

CVE-2006-4268: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 file, 2 x, and 3 y parameters in a admin/filemanager/preview.php; and the 4 email parameter in b admin/login.php...

Sql injection

Multiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 iconid and 2 userid parameters in preview.php...

CVE-2006-2029: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter in a preview.php; the 2 cid, 3 pid, and 4 eid parameters in b archive.php; and the 5 pid parameter in c comments.php...

CVE-2006-2032: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 iconid and 2 userid parameters in preview.php...

CVE-2006-0723: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when registerglobals is enabled, allows remote attackers to include arbitrary files via a URL in the phpscriptpath parameter...