CVE-2006-4366

PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4366

CVE-2006-4366 affects RedBLoG 0.5. It describes a PHP remote file inclusion in index.php, exploitable via a URL in the root_path parameter, enabling remote code execution. The vulnerability is caused by using an unvalidated root_path value to include PHP files, allowing an attacker to execute arb...

CVE-2006-4366

PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4366: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

RedBlog 0.5 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19658/info RedBLoG is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context...

RedBlog 0.5 - index.php Remote File Inclusion

RedBlog 0.5 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19658/info RedBLoG is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing...

Sql injection

SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1140

SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1140

SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1140

The CVE describes a SQL injection in RedBLoG 0.5’s rss.php, exploitable via the cat_id parameter to allow remote execution of arbitrary SQL commands. Affected software: RedBLoG 0.5; vulnerability cause: unsanitized input leading to SQL injection. Impact per NVD: Partial confidentiality/integrity/...

CVE-2006-1140: Undefined Security Weakness

SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

[SA19181] RedBLoG "cat_id" SQL Injection Vulnerability

TITLE: RedBLoG "catid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19181 VERIFY ADVISORY: http://secunia.com/advisories/19181/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: RedBLoG 0.x http://secunia.com/product/8630/ DESCRIPTION: x128 has discover...

RedBLoG <= 0.5 (cat_id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================== RedBLoG x...

RedBLoG &lt;= 0.5 (cat_id) Remote SQL Injection Exploit

No description provided by source. ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl' if !dl'curl.so' and !dl'phpcurl.so' and !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function xssheader echo...