EUVD-2008-4570

Malware in sbrugna...

CVE-2017-15732

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...

CVE-2017-15732

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...

CVE-2017-15732: Cross-Site Request Forgery (CSRF)

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...

CVE-2010-5319: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Kandidat CMS 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that 1 modify settings via a validate action to admin/settings.php, 2 modify pages via the what parameter to admin/edit.php, or 3 modif...

GRAND Flash Album Gallery 0.55 - admin/news.php want2Read Parameter Traversal Arbitrary File Access

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by an admin/news.php want2Read Parameter Traversal Arbitrary File Access security vulnerability...

PHPX 3.x admin/news.php CSRF Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly validate access to administrative command...

CVE-2008-4590: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to admin/login.php and 2 the post parameter to admin/news.php...

CVE-2008-2088

The provided CVE-2008-2088 data describe a SQL injection in PHP Forge 3.0 beta 2, affecting admin/news.php. The vulnerability occurs when crafting the news module’s request to admin.php via the id parameter, enabling remote attackers to execute arbitrary SQL commands. The documents do not specify...

CVE-2008-2088: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...

CVE-2004-2364: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using 1 admin/page.php, 2 admin/news.php, 3 admin/user.php, 4 admin/images.php, 5...