CVE-2006-7115

SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php...

CVE-2006-7120

CVE-2006-7120 is a PHP remote file inclusion in lib/php/phphtmllib-2.5.4; specifically, the vulnerability affects maintain 3.0.0-RC2 via example6.php where a URL supplied to the phphtmllib parameter can lead to code execution. The PT-2007-1398 analysis confirms the affected components: lib/php/ph...

PT-2007-1398 · Php · Lib/Php/Phphtmllib +1

Name of the Vulnerable Software and Affected Versions: lib/php/phphtmllib-2.5.4 maintain version 3.0.0-RC2 Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. This issue might be related to phpHtmlLib. It is noted...

Sql injection

Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-0379

Cross-site scripting XSS vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-0378

Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

DocMan 1.3 RC2 allows remote attackers to obtain sensitive information the full path via unspecified vectors...

CVE-2007-0380

DocMan 1.3 RC2 allows remote attackers to obtain sensitive information the full path via unspecified vectors...

CVE-2007-0379

CVE-2007-0379 describes a cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The NVD entry notes a MEDIUM severity (CVSSv2: AV:N/AC:M/Au:N/C:P/I:P/A:P) with partial impacts on confidentiality, integrity, a...

CVE-2006-6393

Cross-site scripting XSS vulnerability in Jonas Gauffin Publicera 1.0-rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the InputFilter::getString function...

CVE-2006-6394

The CVE-2006-6394 entry describes an SQL injection vulnerability in certain database classes of Jonas Gauffin Publicera 1.0-rc2 and earlier, potentially allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: Jonas Gauffin Publicera 1.0-rc2 and earl...

PHPKit 1.6.1 RC2 (faq/faq.php) Remote SQL Injection Exploit

+-------------------------------------------------------------------- + + PHPKit 1.6.1 RC2 + + Original advisory: + http://www.bb-pcsecurity.de/ + +-------------------------------------------------------------------- + + Affected Software .: PHPKit 1.6.1 RC2 + Venedor ...........:...

CVE-2006-5493

PHP remote file inclusion vulnerability in template/purpletech/baseinclude.php in DigitalHive 2.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-5493

CVE-2006-5493 affects DigitalHive 2.0 RC2. The issue is a PHP remote file inclusion in template/purpletech/base_include.php that lets an attacker execute arbitrary PHP code by supplying a URL in the page parameter. Impact is user-controlled PHP execution with partial confidentiality/integrity/ava...

[Xss] IN SMF 1.1 RC2

InFo ----- Site : www.simplemachines.org Dork : Powered by SMF 1.1 RC2 File : index.php? By : b0rizQ E-Mail : TheFreEKernEl at b0rizQ dot nET email concealed -------------------------------- Xss www.traget.com/index.php?action=login2"scriptalert'xss-by-b0rizQ' /script...

Maintain 3.0.0-RC2 - 'Example6.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20560/info Maintain is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the conte...

Def-Blog <= v1.0.1 (article) Remote SQL Injection Exploit

============================================================================================== DigitalHive = v2.0 RC2 page Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

Maintain 3.0.0-RC2 - Example6.php Remote File Inclusion

Maintain 3.0.0-RC2 - Example6.php Remote File Inclusion source: https://www.securityfocus.com/bid/20560/info Maintain is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

DigitalHive <= v2.0 RC2 (page) Remote File Inclusion Exploit

============================================================================================== DigitalHive = v2.0 RC2 page Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

DigitalHive 2.0 RC2 - base_include.php Remote File Inclusion

DigitalHive 2.0 RC2 - baseinclude.php Remote File Inclusion ============================================================================================== DigitalHive ================================================================================================ Exploit :...