994 matches found
CVE-2005-4051
The CVE-2005-4051 entry concerns e107 version 0.6174, where remote attackers can abuse the rating mechanism to vote multiple times for a download by issuing repeated requests to rate.php. This describes a vulnerability in the download rating feature that enables repeated submissions, but the prov...
CVE-2005-4052
CVE-2005-4052 affects e107 0.6174. The vulnerability arises in rate.php: the download parameter is used after a file download rating, enabling remote attackers to redirect users to arbitrary sites. The default installation reportedly mitigates this via the e_BASE check, restricting redirects to t...
CVE-2005-4051
e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php...
[Full-disclosure] [scip_Advisory] e107 v0.6 rate.php manipulation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e107 v0.6 rate.php voting manipulation and forwarding vulnerability scip AG Vulnerability Advisory 11/10/2005 http://www.scip.ch I. INTRODUCTION e107 is the name of an open-source content management system cms that relies on php and sql. More...
CVE-2005-3594
gamescore.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $playername, $playerscore, and $gamename variables...
CVE-2005-3594
gamescore.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $playername, $playerscore, and $gamename variables...
CVE-2005-3594
CVE-2005-3594 concerns the web app component game_score.php in the content management system e107 . The vulnerability allows remote attackers to insert high scores by sending HTTP POST data that supplies the variables $player_name , $player_score , and $game_name . The available sources describe ...
CVE-2005-3521
SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary SQL commands, bypass authentication, and inject HTML or script via the 1 aname parameter or 2 user field of the login page...
CVE-2005-3521
SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary SQL commands, bypass authentication, and inject HTML or script via the 1 aname parameter or 2 user field of the login page...
CVE-2005-3521
Summary: CVE-2005-3521 describes a SQL injection in the e107 CMS, specifically the resetcore.php script affecting version 0.617 to 0.6173. The vulnerability permits remote attackers to execute arbitrary SQL, bypass authentication, and inject HTML or script via the (1) a_name parameter or (2) the ...
e107 Detection
The remote host is running e107, a content management system written in PHP and with a MySQL back-end. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20129; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...
e107 resetcore.php user Field SQL Injection
The version of e107 installed on the remote host is affected by a SQL injection vulnerability that could allow a remote, unauthenticated attacker to inject SQL commands via the 'resetcore.php' script. This could allow an attacker to gain administrative access to the application, manipulate data i...
e107 remote commands execution
e107 0.617 stable/ 0.6171 / 0.6172 resetcore.php utility SQL Injection / Login bypass / remote code execution / cross site scripting software: site: http://e107.org/news.php description: "e107 is a content management system written in php and using the popular open source mySQL database system fo...
e107remote.txt
e107 0.617 stable/ 0.6171 / 0.6172 resetcore.php utility SQL Injection / Login bypass / remote code execution / cross site scripting software: site: http://e107.org/news.php description: "e107 is a content management system written in php and using the popular open source mySQL database system fo...
e107 0.6172 - resetcore.php SQL Injection
e107 0.6172 - resetcore.php SQL Injection ?php 0.27 18/10/2005 ---e017xpl.php e107 0.617 resetcore.php SQL Injection & remote code execution all-in-one by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = o...
e107 <= 0.6172 (resetcore.php) Remote SQL Injection Exploit
No description provided by source. ?php 0.27 18/10/2005 ---e017xpl.php e107 0.617 resetcore.php SQL Injection & remote code execution all-in-one by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = on...
e107 < 0.6172 - 'resetcore.php' SQL Injection
?php 0.27 18/10/2005 ---e017xpl.php e107 0.617 resetcore.php SQL Injection & remote code execution all-in-one by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = on registerglobals = on usage: customize fo...
e107 <= 0.6172 (resetcore.php) Remote SQL Injection Exploit
Exploit for linux platform in category remote exploits =========================================================== e107 = 0.6172 resetcore.php Remote SQL Injection Exploit =========================================================== ?php 0.27 18/10/2005 ---e017xpl.php e107 0.617 resetcore.php SQL...