CVE-2005-1200

PHP remote file inclusion vulnerability in mainindex.php in AZ Bulletin Board AZbb 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the 1 dirsrc or 2 abslayer parameter to reference a URL on a remote web server that contains the code...

CVE-2005-1201

Multiple directory traversal vulnerabilities in AZ Bulletin board AZbb before 1.0.08 allow 1 remote authenticated users with administrative privileges to delete arbitrary files via a .. dot dot in the URL to adminavatar.php or adminattachment.php or 2 remote attackers to enumerate files via a...

CVE-2005-1200

PHP remote file inclusion vulnerability in mainindex.php in AZ Bulletin Board AZbb 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the 1 dirsrc or 2 abslayer parameter to reference a URL on a remote web server that contains the code...

CVE-2005-1201

Summary: CVE-2005-1201 affects AZ Bulletin Board (AZBB) prior to version 1.0.08. The issue comprises two directory traversal flaws: (1) restricted to remote authenticated admin users who can delete arbitrary files via a “..” in the URL to admin_avatar.php or admin_attachment.php; (2) remote attac...

CVE-2005-1200

AZ Bulletin Board (AZBB) < 1.0.07d is affected by a PHP remote file inclusion in main_index.php (AZBB 1.0.07a–c) via dir_src or abs_layer parameters, enabling arbitrary PHP code execution on a remote server. The official CVE entry (CVE-2005-1200) documents RSF/URL-based code inclusion in AZBB....

CVE-2005-1200: Undefined Security Weakness

PHP remote file inclusion vulnerability in mainindex.php in AZ Bulletin Board AZbb 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the 1 dirsrc or 2 abslayer parameter to reference a URL on a remote web server that contains the code...

CVE-2005-1201: Undefined Security Weakness

Multiple directory traversal vulnerabilities in AZ Bulletin board AZbb before 1.0.08 allow 1 remote authenticated users with administrative privileges to delete arbitrary files via a .. dot dot in the URL to adminavatar.php or adminattachment.php or 2 remote attackers to enumerate files via a...

CVE-2001-0437: Undefined Security Weakness

uploadfile.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to uploadfile...

CVE-2001-0436: Undefined Security Weakness

dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. dot dot in the AZ parameter to reference the program...