CVE-2005-4171

The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check but executes any PHP...

CVE-2005-4173

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function...

CVE-2005-4167

Cross-site scripting XSS vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the let parameter in a viewlist action to titles.php...

CVE-2005-4170

An SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands through the uid parameter to viewuser.php. This CVE-2005-4170 (NVD entry) has a base score of 7.5 (HIGH) with NETWORK access, LOW complexity, no authentication, and partial impacts on confiden...

CVE-2005-4173

CVE-2005-4173 affects eFiction 1.0, 1.1, and 2.0. The vulnerability allows remote attackers to disclose sensitive information by requesting phpinfo.php, which executes PHP's phpinfo function. The documents do not specify exploitation methods beyond the information disclosure, nor do they provide ...

CVE-2005-4171

The CVE reports a remote PHP code execution in eFiction 1.1 when image-upload is allowed. An uploaded file named with a .php extension can start as a GIF (passes image validation) but contains PHP code that gets executed by the web server, enabling arbitrary code execution. The vulnerability stem...

CVE-2005-4169

CVE-2005-4169 affects eFiction 1.0 with multiple SQL injection vulnerabilities. Specifically, remote attackers can inject SQL through the let parameter in authors.php (viewlist action) and the sid parameter in viewstory.php. The issue is documented in NVD/NASL/Nessus entries among related vulnera...

CVE-2005-4168

CVE-2005-4168 affects eFiction versions 1.0, 1.1, and 2.0. The vulnerabilities are SQL injections in two inputs: (1) the let parameter in the titles.php viewlist action, and (2) the username. The issue allows remote attackers to execute arbitrary SQL commands. The available documents do not provi...

CVE-2005-4167

CVE-2005-4167 affects eFiction 1.0 and 1.1, where the let parameter in titles.php’s viewlist action is not sanitized, enabling stored or reflected XSS by remote attackers to inject arbitrary script/HTML. The vulnerability arises from unsanitized user input used to generate dynamic pages, allowing...

CVE-2005-4170

SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php...

CVE-2005-4172

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error message...

CVE-2005-4169

Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 let parameter in a viewlist action to authors.php and 2 sid parameter to viewstory.php...

CVE-2005-4168

Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the let parameter in a viewlist action to titles.php and 2 the username...

CVE-2005-4174

CVE-2005-4174 affects eFiction versions 1.0, 1.1, and 2.0. The issue allows remote attackers to perform unauthorized operations by directly accessing install.php or upgrade.php. It is unclear whether the flaw originates from eFiction itself or from improper system administration (e.g., leftover u...

efiction2_xpl.txt

efiction alertdocument.cookie on version 2.0, thorugh sql injection: http://target/path/titles.php?action=viewlist&let='%20UNION%20SELECT%200,0,'alertdocument.cookie',0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,penname,0%20FROM%20fanfictionauthors%20/ ii if magicquotesgpc off - SQL INJECTION: you can see...

eFiction <= 2.0 multiple vulnerabilities

efiction = 2.0 remote code execution / SQL injection / login bypass / cross site scripting / path & information disclosure software: site: http://www.efiction.wallflowergirl.com/index.php description: "Efiction is a software program that enables users to run automated original or fanfiction...

efiction 1.01.12.0 - titles.php Cross-Site Scripting

efiction 1.01.12.0 - titles.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain...

efiction 1.01.12.0 - uid SQL Injection

efiction 1.01.12.0 - uid SQL Injection source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized...

efiction 1.0/1.1/2.0 - 'uid' SQL Injection

source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized access, modify and corrupt the underlying...

efiction 1.0/1.1/2.0 - 'sid' SQL Injection

source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized access, modify and corrupt the underlying...