Information disclosure

Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information...

CVE-2008-4205

CVE-2008-4205 concerns SQL injection in Attachmax Dolphin

CVE-2008-4206

CVE-2008-4206 is a PHP remote file inclusion vulnerability affecting Attachmax Dolphin 2.1.0 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL in the rel_path parameter to config.php. The public records confirm the vulnerability and its im...

CVE-2008-4207

CVE-2008-4207 affects Attachmax Dolphin 2.1.0 and earlier. The vulnerability is an information disclosure where an improperly protected info.php in the main folder can be accessed via a direct request that invokes the phpinfo function, allowing remote attackers to obtain sensitive information. Th...

CVE-2008-4205

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a Search action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4207

Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information...

CVE-2008-4205: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a Search action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4206: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the relpath parameter...

CVE-2008-4207: Exposure of Sensitive Information to an Unauthorized Actor

Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information...

[ECHO_ADV_101$2008] Attachmax Dolphin <= 2.1.0 Multiple Vulnerabilities

ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : September, 16 ...

Attachmax Dolphin <= 2.1.0 Multiple Remote Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

attachmax-sqlrfidisclose.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple...

Attachmax Dolphin <= 2.1.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Attachmax Dolphin = 2.1.0 Multiple Remote Vulnerabilities ==========================================================...

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dirplugins parameter to a HTMLSax3.php and b safehtml.php in plugins/safehtml/ and the 2 sIncPath parameter to c...

CVE-2008-3167

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dirplugins parameter to a HTMLSax3.php and b safehtml.php in plugins/safehtml/ and the 2 sIncPath parameter to c...

CVE-2008-3167

CVE-2008-3167 concerns BoonEx Dolphin 6.1.2 and related components, showing multiple PHP remote file inclusion vulnerabilities. The issues allow an attacker to execute arbitrary PHP code by supplying a URL to unsafely handled inputs: (1) dir[plugins] to HTMLSax3.php and safehtml.php within plugin...

CVE-2008-3167

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dirplugins parameter to a HTMLSax3.php and b safehtml.php in plugins/safehtml/ and the 2 sIncPath parameter to c...

CVE-2008-3167: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dirplugins parameter to a HTMLSax3.php and b safehtml.php in plugins/safehtml/ and the 2 sIncPath parameter to c...