22 matches found
EUVD-2006-2329
Malware in sbrugna...
EUVD-2006-1654
Malware in sbrugna...
EUVD-2006-2330
Malware in sbrugna...
Sql injection
SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackers to execute arbitrary SQL commands via the query string...
CVE-2006-2328
SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackers to execute arbitrary SQL commands via the query string...
CVE-2006-2329
AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for 1 adodb-access.inc.php, 2 adodb-ado.inc.php, 3 adodb-adoaccess.inc, 4 adodb-adomssql.inc.php, 5 adodb-borlandibase, 6 adodb-csv.inc.php, 7 adodb-db2.inc.php, 8 adodb-fbsql.inc.php, 9...
Design/Logic Flaw
AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for 1 adodb-access.inc.php, 2 adodb-ado.inc.php, 3 adodb-adoaccess.inc, 4 adodb-adomssql.inc.php, 5 adodb-borlandibase, 6 adodb-csv.inc.php, 7 adodb-db2.inc.php, 8 adodb-fbsql.inc.php, 9...
CVE-2006-2328
CVE-2006-2328 describes a SQL injection in AngelineCMS 0.6.5 and earlier. The issue is in the library file lib/adodb/server.php and allows an attacker to manipulate the query string to execute arbitrary SQL commands. Affected product/version explicitly stated as AngelineCMS 0.6.5 and earlier; roo...
CVE-2006-2329
AngelineCMS 0.6.5 and earlier suffers an information disclosure vulnerability. A remote attacker can obtain sensitive information by directly requesting a set of ADODB-related include files (adodb-*.inc.php) which reveal file paths via error messages, and by directly requesting the lib/system/ di...
CVE-2006-2329
AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for 1 adodb-access.inc.php, 2 adodb-ado.inc.php, 3 adodb-adoaccess.inc, 4 adodb-adomssql.inc.php, 5 adodb-borlandibase, 6 adodb-csv.inc.php, 7 adodb-db2.inc.php, 8 adodb-fbsql.inc.php, 9...
CVE-2006-2328
SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackers to execute arbitrary SQL commands via the query string...
AngelineCMS Multiple Vulnerabilities
Summary: --------------------------------------------------- AngelineCMS API C 2003-2004 AngelineCMS developers [email protected] AngelineCMS API is a PHP framework which was developed for rapid development of AngelineCMS content management system. AngelineCMS API is OPEN SOURCE software...
AngelineCMS0.8.1.txt
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV27$2006 --------------------------------------------------------------------------- ECHOADV27$2006 AngelineCMS 0.8.1 Installpath Remote File Inclusion...
CVE-2006-1653
PHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the installPath parameter...
CVE-2006-1653
The CVE references AngelineCMS 0.8.1 with a remote file inclusion (RFI) in loadkernel.php that allows an attacker to supply a URL for the installPath parameter, leading to arbitrary PHP code execution on the server. Public sources describe the issue as an RFI in /kernel/loadkernel.php and note th...
CVE-2006-1653
PHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the installPath parameter...
[ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV27$2006 --------------------------------------------------------------------------- ECHOADV27$2006 AngelineCMS 0.8.1 Installpath Remote File Inclusion --------------------------------------------------------------------------- Author :...
AngelineCMS loadkernel.php installPath Parameter Remote File Inclusion
The remote host is running AngelineCMS, an open source content management system written in PHP. The version of AngelineCMS installed on the remote host fails to sanitize user-supplied input to the 'installPath' parameter of the '/kernel/loadkernel.php' script before using it in a PHP 'includeonc...
AngelineCMS 0.8.1 (installpath) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ============================================================= AngelineCMS 0.8.1 installpath Remote File Inclusion Exploit ============================================================= !/usr/bin/perl AngelineCMS 0.8.1 installpath Remote Cod...
AngelineCMS 0.8.1 - 'installpath' Remote File Inclusion
!/usr/bin/perl AngelineCMS 0.8.1 installpath Remote Code Execution Exploit Bug Found & code By K-159 code reference from uid0/zod at ExploiterCode.com echo.or.id c 2006 usage: perl angelineCMS.pl perl angelineCMS.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell...