CVE-2007-6615

Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selectedprovider parameter...

CVE-2007-6614

PHP remote file inclusion vulnerability in admin/frontpageright.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/frontpageright.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542...

Directory traversal

Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selectedprovider parameter...

CVE-2007-6614

PHP remote file inclusion vulnerability in admin/frontpageright.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542...

CVE-2007-6615

Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selectedprovider parameter...

CVE-2007-6614

CVE-2007-6614 : PHP remote file inclusion in Agares Media phpAutoVideo 2.21. The vulnerability affects the admin/frontpage_right.php script and allows remote attackers to execute arbitrary PHP code via a URL supplied to the loadadminpage parameter. This is described as related to CVE-2007-6542. N...

CVE-2007-6615

The CVE-2007-6615 entry concerns Agares Media phpAutoVideo 2.21. The vulnerability is a directory traversal in includes/block.php that allows remote attackers to include and execute arbitrary local files through crafted directory traversal sequences in the selected_provider parameter. This is con...

Agares Media ThemeSiteScript 'loadadminpage'远程文件包含漏洞

BUGTRAQ ID: 26998 CNCAN ID:CNCAN-2007122702 Agares Media ThemeSiteScript是一款基于PHP的WEB应用程序。 Agares Media ThemeSiteScript不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'admin.php'脚本对用户提交的WEB参数缺少过滤，提交远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 Agares Media ThemeSiteScript 1.0 目前没有解决方案提供：...

Agares PhpAutoVideo 2.21 Remote/Local File Inclusion Vulnerabilities

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

agares-rfilfi.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote...

Agares phpAutoVideo 2.21 - LocalRemote File Inclusion

Agares phpAutoVideo 2.21 - LocalRemote File Inclusion --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Agares PhpAutoVideo 2.21 Remote/Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Agares PhpAutoVideo 2.21 Remote/Local File Inclusion Vulnerabilities ====================================================================...

Agares phpAutoVideo 2.21 - Local/Remote File Inclusion

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote...

Agares Media ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion

source: https://www.securityfocus.com/bid/26998/info ThemeSiteScript is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

Sql injection

SQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary SQL commands via the blockpage parameter. NOTE: as of 20070827, the vendor has made conflicting statements regarding whether this issue exists or not...

CVE-2007-4552

SQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary SQL commands via the blockpage parameter. NOTE: as of 20070827, the vendor has made conflicting statements regarding whether this issue exists or not...

CVE-2007-4551

PHP remote file inclusion vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...

CVE-2007-4552

CVE-2007-4552 affects Agares Media Arcadem 2.01. The vulnerability is an SQL injection in index.php exploitable via the blockpage parameter, enabling remote execution of arbitrary SQL. CVSS v2.0: 7.5 (HIGH), vector AV:N/AC:L/Au:N/C:P/I:P/A:P; network attack, no authentication, low complexity, par...

CVE-2007-4551

CVE-2007-4551 is a PHP remote file inclusion vulnerability affecting Agares Media Arcadem 2.01. The issue occurs in index.php where the loadpage parameter can be used to include arbitrary PHP code, enabling remote code execution. The provided documents do not specify a fixed vulnerable version be...