CVE-2005-4173

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function...

CVE-2005-4172

CVE-2005-4172 affects eFiction 1.0, 1.1, and 2.0. The issue allows remote attackers to obtain sensitive information by requesting storyblock.php with no arguments, causing a PHP error message that leaks the full pathname. This is an information-disclosure flaw arising from an error message reveal...

CVE-2005-4174

eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing 1 install.php or 2 upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration...

CVE-2005-4170

An SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands through the uid parameter to viewuser.php. This CVE-2005-4170 (NVD entry) has a base score of 7.5 (HIGH) with NETWORK access, LOW complexity, no authentication, and partial impacts on confiden...

CVE-2005-4173

CVE-2005-4173 affects eFiction 1.0, 1.1, and 2.0. The vulnerability allows remote attackers to disclose sensitive information by requesting phpinfo.php, which executes PHP's phpinfo function. The documents do not specify exploitation methods beyond the information disclosure, nor do they provide ...

CVE-2005-4169

Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 let parameter in a viewlist action to authors.php and 2 sid parameter to viewstory.php...

CVE-2005-4172

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error message...

CVE-2005-4168

Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the let parameter in a viewlist action to titles.php and 2 the username...

CVE-2005-4170

SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php...

CVE-2005-4168

CVE-2005-4168 affects eFiction versions 1.0, 1.1, and 2.0. The vulnerabilities are SQL injections in two inputs: (1) the let parameter in the titles.php viewlist action, and (2) the username. The issue allows remote attackers to execute arbitrary SQL commands. The available documents do not provi...

CVE-2005-4171

The CVE reports a remote PHP code execution in eFiction 1.1 when image-upload is allowed. An uploaded file named with a .php extension can start as a GIF (passes image validation) but contains PHP code that gets executed by the web server, enabling arbitrary code execution. The vulnerability stem...

CVE-2005-4174

CVE-2005-4174 affects eFiction versions 1.0, 1.1, and 2.0. The issue allows remote attackers to perform unauthorized operations by directly accessing install.php or upgrade.php. It is unclear whether the flaw originates from eFiction itself or from improper system administration (e.g., leftover u...

CVE-2005-4167

CVE-2005-4167 affects eFiction 1.0 and 1.1, where the let parameter in titles.php’s viewlist action is not sanitized, enabling stored or reflected XSS by remote attackers to inject arbitrary script/HTML. The vulnerability arises from unsanitized user input used to generate dynamic pages, allowing...

CVE-2005-4169

CVE-2005-4169 affects eFiction 1.0 with multiple SQL injection vulnerabilities. Specifically, remote attackers can inject SQL through the let parameter in authors.php (viewlist action) and the sid parameter in viewstory.php. The issue is documented in NVD/NASL/Nessus entries among related vulnera...

efiction2_xpl.txt

efiction alertdocument.cookie on version 2.0, thorugh sql injection: http://target/path/titles.php?action=viewlist&let='%20UNION%20SELECT%200,0,'alertdocument.cookie',0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,penname,0%20FROM%20fanfictionauthors%20/ ii if magicquotesgpc off - SQL INJECTION: you can see...

eFiction <= 2.0 multiple vulnerabilities

efiction = 2.0 remote code execution / SQL injection / login bypass / cross site scripting / path & information disclosure software: site: http://www.efiction.wallflowergirl.com/index.php description: "Efiction is a software program that enables users to run automated original or fanfiction...

efiction 1.01.12.0 - uid SQL Injection

efiction 1.01.12.0 - uid SQL Injection source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized...

efiction 1.01.12.0 - titles.php Cross-Site Scripting

efiction 1.01.12.0 - titles.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain...

efiction 1.0/1.1/2.0 - 'sid' SQL Injection

source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized access, modify and corrupt the underlying...

efiction 1.0/1.1/2.0 - 'uid' SQL Injection

source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized access, modify and corrupt the underlying...