PT-2007-3644 · Bloofox · Bloofoxcms

Name of the Vulnerable Software and Affected Versions: BlooFoxCMS version 0.2.2 Description: The issue concerns a PHP remote file inclusion vulnerability in the install/index.php file of BlooFoxCMS. This vulnerability potentially allows remote attackers to execute arbitrary PHP code via a URL in...

CVE-2007-2082

Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. NOTE: a separate vulnerability could be leveraged to make this...

CVE-2006-4915

CVE-2006-4915 describes a Cross-site scripting (XSS) vulnerability in index.php of Innovate Portal 2.0, exploitable by injecting arbitrary web script/HTML via the content parameter. According to the linked sources, the vulnerability is non-authenticated (per CVSS: network attack vector, no user a...

PT-2006-3771

Name of the Vulnerable Software and Affected Versions Realty Portal version 5.1.5 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the cat parameter in the content.php file. Recommendations For Realty Portal...

CVE-2004-2042

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via 1 content parameter to content.php, 2 contentid parameter to content.php, or 3 list parameter to news.php...