467 matches found
CVE-2006-4957
SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php...
CVE-2006-4957
CVE-2006-4957 corresponds to a SQL injection in MyReview 1.9.4. The GetMember function in functions.php fails to sanitize the email parameter used by Admin.php, enabling remote attackers to execute arbitrary SQL. Exploitation details are supported by multiple sources (NVD/Nessus references). The ...
CVE-2006-4957: Undefined Security Weakness
SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php...
CVE-2006-4873: Undefined Security Weakness
Jupiter CMS allows remote attackers to obtain sensitive information via a direct request for 1 includes/functions.php, 2 modules/register.php, 3 modules/poll.php, 4 modules/panel.php, 5 modules/pm.php, 6 modules/news.php, 7 modules/templateschange.php, 8 modules/users.php, 9 modules/misc.php, 10...
MyReview 1.9.4 - email SQL Injection Code Execution
MyReview 1.9.4 - email SQL Injection Code Execution MyReview 1.9.4 SQL Injection exploit http://myreview.lri.fr/ in functions.php starting from line 382 ............ function GetMember $email, $db, $mode="array" $query = "SELECT FROM PCMember WHERE email = '$email'" ; result = $db-execRequete...
MyReview 1.9.4 - 'email' SQL Injection / Code Execution
MyReview 1.9.4 SQL Injection exploit http://myreview.lri.fr/ in functions.php starting from line 382 ............ function GetMember $email, $db, $mode="array" $query = "SELECT FROM PCMember WHERE email = '$email'" ; result = $db-execRequete $query; .......... $email is not checked before used in...
MobilePublisherPHP 1.5 RC2 - Remote File Inclusion
MobilePublisherPHP 1.5 RC2 - Remote File Inclusion MobilePublisherPHP 1.5 RC2 functions.phpRemote Include Vulnerability Discovered by: Timq http://www.securitydb.org Team-Rootshell Email: timqathackernetworkdotcom http://www.securitydb.org Team-Rootshell Vulnerable: require...
CVE-2006-4780
PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-4780: Undefined Security Weakness
PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-4743: Undefined Security Weakness
WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for 1 404.php, 2 akismet.php, 3 archive.php, 4 archives.php, 5 attachment.php, 6 blogger.php, 7 comments.php, 8 comments-popup.php, 9 dotclear.php, 10 footer.php, 11 functions.php, 12...
AzzCoder => phpBB XS 0.58 Remote File Include
A important vulnerability into functions.php will allow a malicious user to insert a remote file. The Vulnerable Code: includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; The phpbbrootpath isn't initialize and PHPBBIN isn't checked...
phpBB XS <= 0.58 (functions.php) Remote File Include Vulnerability
No description provided by source. Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...
phpBB XS <= 0.58 (functions.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== phpBB XS = 0.58 functions.php Remote File Include Vulnerability ================================================================== Author: AzzCoder Vendor:...
phpBB XS 0.58 - functions.php Remote File Inclusion
phpBB XS 0.58 - functions.php Remote File Inclusion Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...
phpBB XS 0.58 - 'functions.php' Remote File Inclusion
Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...
CVE-2006-4456
CVE-2006-4456 affects phpECard 2.1.4 and earlier. It is a PHP remote file inclusion vulnerability in functions.php that allows an attacker to execute arbitrary PHP code by providing a URL in the include_path parameter. The NVD entry lists a base score of 7.5 (HIGH) with network access and low att...
CVE-2006-4456: Undefined Security Weakness
PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
phpECard <= 2.1.4 (functions.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== phpECard = 2.1.4 functions.php Remote File Include Vulnerability ===================================================================...
phpECard <= 2.1.4 (functions.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== phpECard functions.php Remote File Inclusion Exploit =============================================================================================== Critical Level :...
PHPECard 2.1.4 - functions.php Remote File Inclusion
PHPECard 2.1.4 - functions.php Remote File Inclusion ============================================================================================== phpECard functions.php Remote File Inclusion Exploit ===============================================================================================...