273 matches found
CVE-2006-7072
Cross-site scripting XSS vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web script and HTML via the 1 busername and 2 c parameters to a index.php, the busername parameter to b admin/index.php, and 3 cphone parameter to register.php...
CVE-2006-7072
Cross-site scripting XSS vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web script and HTML via the 1 busername and 2 c parameters to a index.php, the busername parameter to b admin/index.php, and 3 cphone parameter to register.php...
CVE-2006-6347
Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly using admin/index.php. NOTE: this can be leveraged with CVE-2006-1412 to create a remote unauthenticated vector...
iPrimal Forums (admin/index.php) Remote File Include Vulnerability
No description provided by source. iPrimal Forums Remote File Inclusion Download:http://ipigroup.org/downloads/forums.zip Found by Bl0od3r Vulnerable Code: line 126-129 ..... if$GET'p' == '' echo 'Please select an item from the menu above.'; else include$GET'p'.'.php'; ..... Affected File:...
CVE-2006-5787
admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chkadmin.php...
CVE-2006-5068
This CVE (CVE-2006-5068) is a PHP remote file inclusion vulnerability in Brudaswen’s admin/index.php for BrudaNews 1.1 and earlier and BrudaGB 1.1 and earlier. The flaw allows a remote attacker to execute arbitrary PHP code by supplying a URL in the o parameter, enabling unauthenticated, network‑...
CVE-2006-5021
Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the root parameter in imgen.php, and the rootpath parameter in 2 admin/config.php, 3 common.php, and 4 admin/index.php. NOTE: the provenance of this...
PT-2006-5762 · Redgun · Redblog
Name of the Vulnerable Software and Affected Versions: redgun RedBLoG version 0.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in several parameters, including the root parameter in "imgen.php", and the root path parameter in "admin/config.php",...
BrudaGB <= v1.1 (o) Remote File Inclusion Exploit
============================================================================================== BrudaGB = v1.1 o Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...
BrudaGB 1.1 - adminindex.php Remote File Inclusion
BrudaGB 1.1 - adminindex.php Remote File Inclusion ============================================================================================== BrudaGB ================================================================================================ Exploit : --------------------------------...
BrudaNews 1.1 - '/admin/index.php' Remote File Inclusion
============================================================================================== BrudaNews ================================================================================================ Exploit : -------------------------------- http://sitename.com/Script...
BrudaGB <= 1.1 (admin/index.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== BrudaGB ==============================================================================================...
BrudaGB <= 1.1 (admin/index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== BrudaGB = v1.1 o Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangero...
BrudaNews <= 1.1 (admin/index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== BrudaNews = v1.1 o Remote File Inclusion Exploit =============================================================================================== Critical Level :...
SmartSiteCMS 1.0 (root) Multiple Remote File Inclusion Vulnerabilities
No description provided by source. smartsite cms v1.0 Multiple Remote File include ------------------------------------------------- Discovered By CrAshoVeRrIdE Arabian Security Team ------------------------------------------------- site of script:www.smartsitecms.net...
SmartSiteCMS 1.0 (root) Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ====================================================================== SmartSiteCMS 1.0 root Multiple Remote File Inclusion Vulnerabilities ====================================================================== smartsite cms v1.0 Multiple...
CVE-2006-2891
Pixelpost’s admin/index.php (versions 1-5rc1-2 and earlier) contains a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary HTML or web script through the loginmessage parameter. The vulnerability is described across multiple sources (NVD and related records) with the ...
Sql injection
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the 1 date parameter in index.php or bypass authentication via the 2 password parameter in admin/index.php...
CVE-2006-1426
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the 1 date parameter in index.php or bypass authentication via the 2 password parameter in admin/index.php...
CVE-2006-1426
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the 1 date parameter in index.php or bypass authentication via the 2 password parameter in admin/index.php...