302 matches found
MyReview 1.9.4 - 'email' SQL Injection / Code Execution
MyReview 1.9.4 SQL Injection exploit http://myreview.lri.fr/ in functions.php starting from line 382 ............ function GetMember $email, $db, $mode="array" $query = "SELECT FROM PCMember WHERE email = '$email'" ; result = $db-execRequete $query; .......... $email is not checked before used in...
MobilePublisherPHP 1.5 RC2 - Remote File Inclusion
MobilePublisherPHP 1.5 RC2 - Remote File Inclusion MobilePublisherPHP 1.5 RC2 functions.phpRemote Include Vulnerability Discovered by: Timq http://www.securitydb.org Team-Rootshell Email: timqathackernetworkdotcom http://www.securitydb.org Team-Rootshell Vulnerable: require...
CVE-2006-4780
PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
AzzCoder => phpBB XS 0.58 Remote File Include
A important vulnerability into functions.php will allow a malicious user to insert a remote file. The Vulnerable Code: includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; The phpbbrootpath isn't initialize and PHPBBIN isn't checked...
phpBB XS <= 0.58 (functions.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== phpBB XS = 0.58 functions.php Remote File Include Vulnerability ================================================================== Author: AzzCoder Vendor:...
phpBB XS 0.58 - functions.php Remote File Inclusion
phpBB XS 0.58 - functions.php Remote File Inclusion Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...
phpBB XS <= 0.58 (functions.php) Remote File Include Vulnerability
No description provided by source. Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...
phpBB XS 0.58 - 'functions.php' Remote File Inclusion
Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...
CVE-2006-4456
CVE-2006-4456 affects phpECard 2.1.4 and earlier. It is a PHP remote file inclusion vulnerability in functions.php that allows an attacker to execute arbitrary PHP code by providing a URL in the include_path parameter. The NVD entry lists a base score of 7.5 (HIGH) with network access and low att...
phpECard <= 2.1.4 (functions.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== phpECard functions.php Remote File Inclusion Exploit =============================================================================================== Critical Level :...
phpECard <= 2.1.4 (functions.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== phpECard = 2.1.4 functions.php Remote File Include Vulnerability ===================================================================...
PHPECard 2.1.4 - functions.php Remote File Inclusion
PHPECard 2.1.4 - functions.php Remote File Inclusion ============================================================================================== phpECard functions.php Remote File Inclusion Exploit ===============================================================================================...
OZJournal v1.5 - XSS
OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGmainpath parameter in 1 functions.php, 2 template.php, 3 news.php, 4 help.php, 5 mail.php, 6 Admin/admincats.php, 8 Admin/adminedit.php, 9...
ScozNews 1.2.1 - mainpath Remote File Inclusion
ScozNews 1.2.1 - mainpath Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM ScozNews v1.2.1 - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl dork: "Powered By ScozNews"...
Sql injection
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 functions.php and 2 user.php in the libs directory, 3 edit.php and 4 delete.php in control/files/, 5 edit.php and 6 delete.php in control/users/, 7 edit.php,...
CVE-2006-1104
Pixelpost
[eVuln] Teca Diary PE SQL Injection Vulnerability
New eVuln Advisory: Teca Diary PE SQL Injection Vulnerability http://evuln.com/vulns/75/summary.html --------------------Summary---------------- eVuln ID: EV0075 CVE: CVE-2006-0729 Software: Teca Diary PE Sowtware's Web Site: http://www.teca-scripts.com Versions: 1.0 Critical Level: Moderate Type...
