25 matches found
EUVD-2006-1754
Malware in sbrugna...
EUVD-2006-1759
Malware in sbrugna...
EUVD-2007-6012
Malware in sbrugna...
CVE-2007-6042
PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
SWSoft Confixx 3.0.6/3.0.8/3.1.2 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17476/info Confixx is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...
Remote file inclusion
PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-6042
PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-6042
The CVE-2007-6042 entry concerns SWSoft Confixx Professional 3.2.1, where a PHP remote file inclusion vulnerability exists in fehler.inc.php. An attacker can cause arbitrary PHP code execution by supplying a URL in an unspecified parameter, enabling potential remote control of affected systems. T...
CVE-2007-6042
PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
SWSoft Confixx Fehler.Inc.PHP远程文件包含漏洞
SWSoft Confixx Fehler.Inc.PHP Remote File Include Vulnerability SWSoft Confixx是一款基于PHP的WEB应用程序。 SWSoft Confixx不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Fehler.Inc.PHP'脚本对用户提交的WEB参数缺少过滤,指定远程服务器上的任意文件作为包含参数,可导致以WEB权限执行任意PHP代码。 SWSoft Confixx Professional 3.2.1 目前没有详细解决方案提供:...
CVE-2007-6042: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-4009
PHP remote file inclusion vulnerability in admin/businessinc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the thisdir parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in admin/businessinc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the thisdir parameter...
PT-2007-5222 · Swsoft · Swsoft Confixx Pro
Name of the Vulnerable Software and Affected Versions: SWSoft Confixx Pro versions 2.0.12 through 3.3.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the thisdir parameter in the admin/business inc/saveserver.php file. Recommendations: For SWSoft Confix...
CVE-2007-4009
PHP remote file inclusion vulnerability in admin/businessinc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the thisdir parameter...
CVE-2007-4009
CVE-2007-4009 affects SWSoft Confixx Pro 2.0.12–3.3.1. A remote file inclusion flaw in admin/business_inc/saveserver.php allows an attacker to supply a URL via the thisdir parameter to execute arbitrary PHP code. Exploitation details and patches are not described in the provided documents; relate...
CVE-2007-4009: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in admin/businessinc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the thisdir parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in allgemeintransfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter...