CVE-2019-19345

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mediawiki-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

CVE-2019-19346

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their...

apb-energy.fr XSS vulnerability

Vulnerable URL: http://www.apb-energy.fr/boutique/ficheproduit.cfm?ref=CHARG24V15A==%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3Elg=lgfr=261 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:08 GMT Vulnerability type:| XSS...

AnotherPHPBook (APB) 1.3.0 - Authentication Bypass

AnotherPHPBook APB 1.3.0 - Authentication Bypass APBook 1.3.0 Login Bypass SQL Injection Vulnerability AUTHOR: n3w7u Download: www.clanscripte.net/main.php?content=download&do=dl&dlid=81 Dorks: inurl:apbook/index.php or AnotherPHPBook APB v.1.3.0 © 2001 by Stephan Baumeister zap Exploit:...

AnotherPHPBook (APB) v.1.3.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. APBook 1.3.0 Login Bypass SQL Injection Vulnerability AUTHOR: n3w7u Download: www.clanscripte.net/main.php?content=download&do=dl&dlid=81 Dorks: inurl:apbook/index.php or AnotherPHPBook APB v.1.3.0 © 2001 by Stephan Baumeister zap Exploit:...

CVE-2008-6007

CVE-2008-6007 describes an SQL injection in QuidaScript BookMarks Favourites Script (APB) where the vulnerability exists in view_group.php and is exploitable via the id parameter. The root cause is unsanitized input leading to arbitrary SQL execution, with potential impact including data access o...

CVE-2008-3748

Active PHP Bookmarks (APB) versions 1.1.02 and 1.2.06 are affected by a SQL injection in view_group.php, exploitable via the id parameter to allow remote arbitrary SQL execution. The vulnerability is documented with a CVSSv2 base score of 7.5 (HIGH) with network attack vector, no authentication, ...

Remote file inclusion

PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes APB 0.2.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGStemplatepath parameter. NOTE: this issue might be related to CVE-2003-1254...

CVE-2007-1621

CVE-2007-1621 describes a PHP remote file inclusion in Active PHP Bookmark Notes (APB). The vulnerability arises from APB_SETTINGS[template_path] allowing an attacker to reference a remote URL in templates/head.php, enabling arbitrary code execution. Relatedly, CVE-2003-1254 affects APB 1.1.01 (h...

CVE-2006-6167

Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks APB 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGS'apbpath' parameter in 1 apbcommon.php or 2 apb.php. NOTE: CVE and another third party...

CVE-2006-6167

Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks APB 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGS'apbpath' parameter in 1 apbcommon.php or 2 apb.php. NOTE: CVE and another third party...

CVE-2006-6167

Active PHP Bookmarks (APB) 1.1.02 contains PHP remote file inclusion vulnerabilities allowing remote code execution via a URL in APB_SETTINGS['apb_path'] in apb_common.php or apb.php. Affected components: apb_common.php, apb.php. Root cause: RFI through unvalidated APB_SETTINGS parameter. Impact:...

PT-2006-6801 · Active Php · Active Php Bookmarks

Name of the Vulnerable Software and Affected Versions: Active PHP Bookmarks version 1.1.02 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the APB SETTINGS'apb path' parameter in 1 apb common.php or 2 apb.php. However, it is noted that the PHP scripts exi...

CVE-2003-1255

The vulnerability CVE-2003-1255 affects Active PHP Bookmarks (APB) 1.1.01, where add_bookmark.php allows remote attackers to add arbitrary bookmarks as other users by modifying the auth_user_id parameter. The issue arises from improper authorization checks during bookmark creation, enabling unaut...

CVE-2003-1254

APB 1.1.01 is affected by a remote PHP code execution vulnerability. An attacker can cause arbitrary code execution by altering the APB_SETTINGS parameter to point to a remote URL containing code, via files head.php , apb_common.php , or apb_view_class.php . The root cause is loading code from a ...