CVE-2008-3033

RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to access admin functions and have unspecified other impact, as demonstrated by 1 an IdFlux request to supprimerflux.php and 2 a TpsRafraich request to...

CVE-2008-3034

Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 IdFlux parameter to admin/fonctions/supprimerflux.php and the 2 IdTag parameter to admin/fonctions/supprimertag.php...

CVE-2008-3033

CVE-2008-3033 concerns RSS-aggregator 1.0 where the admin/fonctions/ directory does not require administrative authentication. This allows remote attackers to access admin functions (e.g., supprimer_flux.php and modifier_tps_rafraich.php) with unspecified additional impact. The provided documents...

CVE-2008-3034

CVE-2008-3034 affects RSS-aggregator 1.0. The vulnerability is a SQL injection in two input points: the IdFlux parameter to admin/fonctions/supprimer_flux.php and the IdTag parameter to admin/fonctions/supprimer_tag.php. This allows remote attackers to execute arbitrary SQL commands. The availabl...

CVE-2008-3033: Improper Authentication

RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to access admin functions and have unspecified other impact, as demonstrated by 1 an IdFlux request to supprimerflux.php and 2 a TpsRafraich request to...

CVE-2008-3034: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 IdFlux parameter to admin/fonctions/supprimerflux.php and the 2 IdTag parameter to admin/fonctions/supprimertag.php...

rssagg-sql.txt

---------------- RSS-aggregator ---------------- Informations : Langage : PHP Version : 1.0 Website : http://www.rss-aggregator.com Problems : Multiple vulnerabilities Description: RSS-aggregator is a tool, for Webmaster, allowing to display several feeds RSS on a single page. Details :...

RSS-aggregator SQL注入漏洞

BUGTRAQ ID: 30016 CNCAN ID：CNCAN-2008070102 RSS-aggregator是一款基于PHP的WEB应用程序。 RSS-aggregator不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 RSS-aggregator 1.0 目前没有详细解决方案提供： http://www.rss-aggregator.com/...

RSS-aggregator Multiple vulnerabilities

---------------- RSS-aggregator ---------------- Informations : Langage : PHP Version : 1.0 Website : http://www.rss-aggregator.com Problems : Multiple vulnerabilities Description: RSS-aggregator is a tool, for Webmaster, allowing to display several feeds RSS on a single page. Details :...

RSS-aggregator 1.0 - IdTag SQL Injection

RSS-aggregator 1.0 - IdTag SQL Injection source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...

RSS-aggregator 1.0 - Authentication Bypass

RSS-aggregator 1.0 - Authentication Bypass source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...

RSS-aggregator 1.0 - Authentication Bypass

source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database,...

RSS-aggregator 1.0 - 'IdTag' SQL Injection

source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database,...

Remote file inclusion

PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2884

PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2884

The vulnerability CVE-2008-2884 affects the RSS-aggregator component, specifically display.php, where a PHP remote file inclusion is possible. An attacker can supply a URL in the path parameter to cause the application to include and execute remote PHP code on the server. Root cause: PHP remote f...

CVE-2008-2884: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information...

RSS-aggregator (display) Remote File Inclusion Vulnerability

RSS-aggregator display Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM HOME : www.Real-Hack.net Email : [email protected] Script : RSS-aggregator Download Script : http://www.rss-aggregator.com/download.php =========================== Viva IslaM ==========================...

rssaggregator-rfi.txt

RSS-aggregator display Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM HOME : www.Real-Hack.net Email : [email protected] Script : RSS-aggregator Download Script : http://www.rss-aggregator.com/download.php =========================== Viva IslaM ==========================...

RSS-Aggregator (display.php path) Remote File Inclusion Vulnerability

No description provided by source. RSS-aggregator display Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM HOME : www.Real-Hack.net Email : [email protected] Script : RSS-aggregator Download Script : http://www.rss-aggregator.com/download.php =========================== Viva...