75 matches found
CVE-2014-4516
The CVE-2014-4516 entry affects the WordPress BIC Media Widget plugin (
CVE-2014-4516: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...
My-BIC 0.6.5 - Mybic_Server.PHP Remote File Include Vulnerability
No description provided by source...
PT-2014-5946
Name of the Vulnerable Software and Affected Versions BIC Media Widget plugin version 1.0 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the param parameter in the...
WordPress BIC Media Widget Plugin <= 1.0 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "param" parameter. Solution Update the plugin...
CVE-2006-6018
Summary: For Jim Plush My-BIC 0.6.5, multiple CVEs exist describing PHP remote file inclusion (RFI) vectors in mybic_server.php. CVE-2006-6018 cites an RFI via INC_PATH (a claim disputed by CVE and researchers because INC_PATH is a constant). CVE-2006-5089 cites an RFI via the file parameter (wit...
CVE-2006-6018: Undefined Security Weakness
PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the INCPATH parameter, a different vector than CVE-2006-5089. NOTE: this issue is disputed by CVE and third party researchers because INCPATH is ...
My-BIC => 0.6.5 Remote File Include Vulnerability
No description provided by source. !/usr/bin/perl My-BIC = 0.6.5 Remote File Include Vulnerability Exploit Script.............. : My-BIC Expl0iter.... : theEdit0r Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.Xmors.com Pablic http://Www.Xmors.net pirv8 We...
mybic065-rfi.pl.txt
!/usr/bin/perl My-BIC = 0.6.5 Remote File Include Vulnerability Exploit Script.............. : My-BIC Expl0iter.... : theEdit0r Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.Xmors.com Pablic http://Www.Xmors.net pirv8 We ArE : Scorpiunix , KAMY4r , Sh3ll ,...
CVE-2006-5089
PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this...
CVE-2006-5089
CVE-2006-5089 describes a PHP remote file inclusion in Jim Plush My-BIC 0.6.5 via the file parameter in mybic_server.php. The related CVE-2006-6018 notes a different vector (INC_PATH) for the same software and states that the issue is disputed because INC_PATH is a constant. PT-2006-5827 provides...
PT-2006-5827 · My-Bic · My-Bic
Name of the Vulnerable Software and Affected Versions: My-BIC version 0.6.5 Description: A remote file inclusion issue in mybic server.php allows remote attackers to potentially execute arbitrary PHP code via a URL in the file parameter. However, it's noted that the file variable is defined befor...
CVE-2006-5089: Undefined Security Weakness
PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this...
My-BIC 0.6.5 - Mybic_Server.php Remote File Inclusion
My-BIC 0.6.5 - MybicServer.php Remote File Inclusion source: https://www.securityfocus.com/bid/20208/info My-BIC is prone to a remote file-include vulnerability because these applications fail to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise...
My-BIC 0.6.5 - 'Mybic_Server.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20208/info My-BIC is prone to a remote file-include vulnerability because these applications fail to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other...