811 matches found
CVE-2008-2535: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to 1 gbuch.admin.php, 2 links.admin.php, 3 menue.admin.php, 4 news.admin.php, and 5 todo.admin.php in admin/module/...
CVE-2004-2747: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. dot dot in the DEL command, which triggers different error messages depending on...
drupal Zend Hash Del Key Or Index php injection
оф сайт http://drupal.org/ уязвимы версии drupal 5 =5.2 и возможно другие. благодоря возможности подменить некоторые переменные можно вызвать произвольную функцию определенную в скриптах посредством calluserfunc, в результате чего можно выполнить произвольный код PHP через встроеную функцию движк...
CVE-2007-2350
admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...
CVE-2007-2350
admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...
CVE-2007-2350: Undefined Security Weakness
admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...
GuppY v4.0 remote del files/index
GuppY v4.0 remote del files/index By : sn0oPy Risk : high site : http://www.freeguppy.org/ Dork : inurl:"/guppy/index.php" exploit : just add install/install.php to the script folder http://www.target.ma/guppy/install/install.php choose "Installation propre" next choose "Suppression des fichiers...
CVE-2007-1219
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
Remedy Action Request System 5.01.02 - User Enumeration
======================================================= Remedy Action Request System User Enumeration ======================================================= Davide Del Vecchio Adv11 Discovered in: 08/01/2007 Version affected: Remedy Action Request System 5.01.02 Patch 1267. The same vulnerable...
CVE-2006-6246: Undefined Security Weakness
Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to 1 camera del, 2 camera edit, 3 folder/album deletion, 4 photo.move, 5 content.indexer, 6 folder.content, and possibly other...