CVE-2006-5637

CVE-2006-5637 describes a PHP remote file inclusion vulnerability in Faq Administrator 2.1b, where an attacker can invoke arbitrary PHP code via a URL supplied in the email parameter of faq_reply.php. The NVD entry lists a base score of 7.5 (HIGH) with network access and low attack complexity, im...

CVE-2006-5637

PHP remote file inclusion vulnerability in faqreply.php in Faq Administrator 2.1b allows remote attackers to execute arbitrary PHP code via a URL in the email parameter...

Faq Administrator 2.1 (faq_reply.php) Remote File Include Vulnerability

No description provided by source. ================================================================== Faq Administrator RFI ================================================================== Info:- Scripts: Faq Administrator http://www.campbus.com/downloads/faqadmin/faqadmin-current.tgz Version :...

Faq Administrator 2.1 - 'faq_reply.php' Remote File Inclusion

================================================================== Faq Administrator RFI ================================================================== Info:- Scripts: Faq Administrator http://www.campbus.com/downloads/faqadmin/faqadmin-current.tgz Version : 2.1b Dork & vuln : download script...

Faq Administrator 2.1 (faq_reply.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Faq Administrator 2.1 faqreply.php Remote File Include Vulnerability =======================================================================...

Faq Administrator 2.1 - faq_reply.php Remote File Inclusion

Faq Administrator 2.1 - faqreply.php Remote File Inclusion ================================================================== Faq Administrator RFI ================================================================== Info:- Scripts: Faq Administrator...

Free FAQ 1.0 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20621/info Free Faq is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with...

Free FAQ 1.0 - index.php Remote File Inclusion

Free FAQ 1.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/20621/info Free Faq is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary...

phpBBFM <= 206-3-3 (phpbb_root_path) Remote File Include Exploit

No description provided by source. !/usr/bin/perl phpBBFM Fully Modded Documentation Class: Remote File Include Vulnerability Date: 2006/10/15 Remote: Yes Type: high Site: http://osgaming.net/Downloads/SiteTools/FM206-3-3.zip...

CVE-2006-5101

CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...

Comdev FAQ Support 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev FAQ Support 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev FAQ Support 3.1 + Venedor ...........: http://www.comdevweb.com + Clas...

CVE-2006-4892

SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-4892

CVE-2006-4892 concerns an SQL injection in Techno Dreams’ FAQ Manager Package 1.0, exploitable via the key parameter in faqview.asp. The vulnerability allows remote attackers to alter or reveal data by injecting arbitrary SQL commands. The NVD entry associates a high base score (7.5) with network...

Techno Dreams FAQ Manager Package v1.0(faqview.asp) Remote SQL Injection Vulnerability

Vulnerability Report Title : Techno Dreams FAQ Manager Package v1.0faqview.asp Remote SQL Injection Vulnerability Author : ajann Dork : faqview.asp?key Script Page : http://www.t-dreams.com Exploit; http://target/path/faqview.asp?key=SQL HERE Example:...

Techno Dreams FAQ Manager 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Techno Dreams FAQ Manager 1.0 Remote SQL Injection Vulnerability ================================================================ Title : Techno Dreams FAQ Manager Package...

Techno Dreams FAQ Manager 1.0 Remote SQL Injection Vulnerability

No description provided by source. Title : Techno Dreams FAQ Manager Package v1.0faqview.asp Remote SQL Injection Vulnerability Author : ajann Dork : faqview.asp?key Script Page : http://www.t-dreams.com Exploit; http://target/path/faqview.asp?key=SQL HERE Example:...

Techno Dreams FAQ Manager 1.0 - SQL Injection

Title : Techno Dreams FAQ Manager Package v1.0faqview.asp Remote SQL Injection Vulnerability Author : ajann Dork : faqview.asp?key Script Page : http://www.t-dreams.com Exploit; http://target/path/faqview.asp?key=SQL HERE Example:...

CVE-2006-4590

SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2006-4463. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-4590

CVE-2006-4463 and CVE-2006-4590 describe SQL injection flaws in Jetstat.com JS ASP Faq Manager 1.10 and earlier. CVE-2006-4463 affects the administrator control panel via the pwd parameter; CVE-2006-4590 affects admin/default.asp via the uid parameter. Both allow remote attackers to potentially e...

CVE-2006-4590

SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2006-4463. NOTE: the provenance of this information is unknown; the details are obtained...