CVE-2006-4748

Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 xagent, 2 xpath, 3 xreferer, and 4 xdns parameters in a admin/plugins/NPLog.php, and the 5 pitem parameter in b admin/plugins/NPPoll.php; and allow remote authenticated...

CVE-2006-4748

Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 xagent, 2 xpath, 3 xreferer, and 4 xdns parameters in a admin/plugins/NPLog.php, and the 5 pitem parameter in b admin/plugins/NPPoll.php; and allow remote authenticated...

CVE-2006-4748

CVE-2006-4748 affects F-ART BLOG:CMS 4.1. Multiple SQL injection vulnerabilities exist in the admin area: parameters (1) xagent, (2) xpath, (3) xreferer, (4) xdns in NP_Log.php; (5) pitem in NP_Poll.php; and (6) pageRef in NP_Referrer.php. These allow remote SQL command execution via the cited pa...

CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

CVE-2005-4686

PunBB 1.2.9 (often with F-ART BLOG:CMS) includes config.php before calling unregister_globals, enabling exposure of unspecified sensitive information. Root cause: premature/configuration sequencing in the initialization flow. Impact is limited to information disclosure; no explicit vector or expl...

CVE-2005-4687

PunBB 1.2.9 (used standalone or with F-ART BLOG:CMS) trusts the client IP from the X-Forwarded-For header instead of the TCP/IP stack, enabling IP address spoofing by remote attackers. Red Hat and CVE records corroborate this vulnerability in PunBB 1.2.9. The underlying issue is header-based IP e...

CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

CVE-2005-4686

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregisterglobals function, which allows attackers to obtain unspecified sensitive information...