PT-2011-4654

Name of the Vulnerable Software and Affected Versions OpenDocMan version 1.2.6-svn-2011-01-21 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example,...

Tainos Webdesign (All Scripts) - SQL Injection Cross-Site Scripting HTML Injection

Tainos Webdesign All Scripts - SQL Injection Cross-Site Scripting HTML Injection ------------------------------------------------------------------------------------------- Tainos Webdesign All Scripts SQL/XSS/HTML Injection Vulnerability...

CVE-2008-7026

CVE-2008-7026 describes an unrestricted file-upload vulnerability in eFront (version 3.5.1 build 2710 and earlier) where an attacker can upload a file with an executable extension as a user avatar via the filesystem3.class.php upload process, and then access it through a direct request to the fil...

CVE-2008-7026: Undefined Security Weakness

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in 1 student/avatars/ or 2...

CVE-2007-2943: Undefined Security Weakness

PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

Webavis 0.1.1 (class.php root) Remote File Inclusion Vulnerability

No description provided by source. Webavis Remote file inclusion root Download script : http://webavis.myreseau.org/src/webavis-0.1.1.tar.gz Thanks Str0ke :D Exploit : http://victim.com/webavis/class/class.php?root=shell.txt ? Discovered by ThE TiGeR MiroTigeratHotmail.com sebug.net...

Webavis 0.1.1 (class.php root) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Webavis 0.1.1 class.php root Remote File Inclusion Vulnerability ================================================================== Webavis Remote file inclusion root...

Webavis 0.1.1 - class.php?root Remote File Inclusion

Webavis 0.1.1 - class.php?root Remote File Inclusion Webavis Remote file inclusion root Download script : http://webavis.myreseau.org/src/webavis-0.1.1.tar.gz Thanks Str0ke :D Exploit : http://victim.com/webavis/class/class.php?root=shell.txt ? Discovered by ThE TiGeR MiroTigeratHotmail.com...

CVE-2006-3752

The CVE-2006-3752 entry concerns SQL injection in the class.php of the Professional Home Page Tools Guestbook. The vulnerability allows remote attackers to inject SQL via any of the five parameters: hidemail, name, mail, ip, or text, potentially compromising data integrity and confidentiality and...

CVE-2006-3752: Undefined Security Weakness

Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the 1 hidemail, 2 name, 3 mail, 4 ip, or 5 text parameters...