4077 matches found
CVE-2007-2000
CVE-2007-2000 affects Crea-Book 1.0 and earlier. The vulnerability is multiple SQL injection flaws in admin/admin.php, exploitable via the (1) pseudo or (2) passe parameter, allowing remote attackers to run arbitrary SQL commands. The description in the connected documents confirms this vector an...
CVE-2007-2001
CVE-2007-2001 affects Crea-Book 1.0 and earlier via admin/configurer2.php. The vulnerability arises from direct static code injections in the Fond de la page (background color) field and related fields, allowing remote authenticated administrators to execute arbitrary PHP code and inject into con...
CVE-2007-1998
The CVE-2007-1998 entry concerns HIOX Guest Book (HGB) 4.0. Affected component: the Email field in gb.php. Root cause: direct static code injection that allows remote attackers to inject PHP code, resulting in code execution. Exploitability: described as a remote issue via a direct request; no ex...
CVE-2007-1998: Undefined Security Weakness
Direct static code injection vulnerability in HIOX Guest Book HGB 4.0 allows remote attackers to inject arbitrary PHP code via the Email field, which results in code execution through a direct request to gb.php...
CVE-2007-2001: Undefined Security Weakness
Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" background color field and other unspecified fields, which injects into config.inc.php3...
CVE-2007-2000: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 pseudo or 2 passe parameter...
creabook-bypass.txt
/=======================================\ | Advisory :: Crea-Book fr/en | | Date : 2007-04-10 | | Last update : 2007-04-10 | | | +-------------------------------------------------------------------------------------------------------+ | Summary : 0 Description | | 1 Vuln1 : Administrative Access...
hgb-exec.txt
+========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...
Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution
/======================================= | Advisory :: Crea-Book = 1.0 | +=======================================+--------------------------------------------------------------- | | | Download link : http://www.comscripts.com/scripts/php.creabook.1359.html | | Type : Guestbook | | Vuln. found :...
HIOX GUEST BOOK (HGB) 4.0 Remote Code Execution Vulnerability
+========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...
CVE-2007-1937
PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter...
CVE-2007-1937
PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter...
CVE-2007-1933
CVE-2007-1933 describes multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 that allow remote attackers to include and execute arbitrary local files through a ".." in the lang parameter to (1) index.php, (2) gb.php, or (3) faq.php. The root cause is directory traversal le...
pcp-lfi.txt
.-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ Portal.......: PcP-Book 3.0 Site.........: http://www.pcp-system.at Down.........: http://www.ectona.org/download/?id=621&s=info Author.......: Dj7xpl | [email protected] ++ ++...
HIOX GUEST BOOK (HGB) 4.0 Remote Code Execution Vulnerability
No description provided by source. +========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...
scorpbook10-rfi.txt
Portal : Scorp Book v1.0 Download : http://www.ectona.org/download/?id=598&s=info Author : KaRTaLl | [email protected] Class : Remote File Include Exploit use IO::Socket; if @ARGV ; while$cmd ! "END" $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$host", PeerPort="80" or die "Connect...
HIOX GUEST BOOK (HGB) 4.0 Remote Code Execution Vulnerability
Exploit for unknown platform in category web applications ============================================================= HIOX GUEST BOOK HGB 4.0 Remote Code Execution Vulnerability =============================================================...
Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution
Exploit for unknown platform in category web applications ===================================================================== Crea-Book fr/en | | Date : 2007-04-10 | | Last update : 2007-04-10 | | |...
Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution
No description provided by source. /=======================================\ | Advisory :: Crea-Book = 1.0 | +=======================================+---------------------------------------------------------------\ | | | Download link : http://www.comscripts.com/scripts/php.creabook.1359.html | |...