Server side request forgery (ssrf)

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

CVE-2019-11574

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

CVE-2019-11574: Server-Side Request Forgery (SSRF)

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

CVE-2011-1130: Improper Input Validation

Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest functio...

Kravchuk letter script 1.0 (scdir) Remote File Inclusion Vulnerabilities

No description provided by source. ++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++ + K-letter 1.0 Remote File include + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + DownloadScript: http://www.scripts.com.ua/download.php?ID=813 +...

kletter-rfi.txt

++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++ + K-letter 1.0 Remote File include + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + DownloadScript: http://www.scripts.com.ua/download.php?ID=813 +...

CVE-2007-3118: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter K-letter 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the scdir parameter to 1 action.php, 2 subs.php, or 3 unsubs.php...

Kravchuk letter script 1.0 - scdir Remote File Inclusion

Kravchuk letter script 1.0 - scdir Remote File Inclusion ++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++ + K-letter 1.0 Remote File include + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + DownloadScript: http://www.scripts.com.ua/download.php?ID=813...

Code injection

Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into subs.php via the 1 Sub-name or 2 Sub-url field. NOTE: an earlier report indicated that the add action can be reached through a request to index.php...

CVE-2007-2169: Undefined Security Weakness

Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into subs.php via the 1 Sub-name or 2 Sub-url field. NOTE: an earlier report indicated that the add action can be reached through a request to index.php...