phpMyFAQ admin/news.php file cross-site request forgery vulnerability

phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...

CVE-2017-15732

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...

SQL injection vulnerability in the type parameter of admin_news.php page in Ocean CMS system

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminnews.php page of Ocean CMS. The lack of filtering of the "type" parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Ocean CMS Order Parameter

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminnews.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'order' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/adminnewsbot.php in Drunken:Golem Gaming Portal 0.5.1 alpha 2 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter, a different vector than CVE-2007-0572...

Admin News Tools Version Detection

This script detects the installed version of Admin News Tool. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Admin News Tools Multiple Vulnerabilities

Admin News Tools is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request...

Directory traversal

Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the fichier parameter...

CVE-2009-2557

Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the fichier parameter...

CVE-2009-2557

Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the fichier parameter...

CVE-2009-2558

CVE-2009-2558 affects Admin News Tools 2.5. The vulnerability is a failure to properly restrict access in system/message.php, enabling remote attackers to post news messages via a direct request. NVD lists a CVSSv2 base score of 7.5 (High) with NETWORK attack vector, LOW attack complexity, and pa...

CVE-2009-2557

The vulnerability CVE-2009-2557 affects Admin News Tools 2.5, with a directory traversal flaw in system/download.php that permits reading arbitrary files via a .. sequence in the fichier parameter. This is described across multiple sources (NVD entry for CVE-2009-2557 and OpenVAS detail for Admin...

Admin News Tools Contents Change

Admin News Tools Remote Contents Change Vulnerability Just for Fun...

Admin News Tools 2.5 Remote File Download Vulnerability

Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability...

Admin News Tools 2.5 - 'fichier' Remote File Disclosure

Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability...

Admin News Tools Remote Contents Change Vulnerability

Exploit for unknown platform in category web applications ===================================================== Admin News Tools Remote Contents Change Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...

Admin News Tools 2.5 (fichier) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== Admin News Tools 2.5 fichier Remote File Disclosure Vulnerability ===================================================================...

Admin News Tools - Remote Contents Change

Admin News Tools - Remote Contents Change Admin News Tools Remote Contents Change Vulnerability /textarea Just for Fun milw0rm.com 2009-07-15...

Admin News Tools 2.5 (fichier) Remote File Disclosure Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir &...