10 matches found
EUVD-2002-1542
Malware in sbrugna...
EUVD-2009-2587
Malware in sbrugna...
EUVD-2004-2344
Malware in sbrugna...
Command Execution Vulnerability in seacms Backend
seacms is a video-on-demand system based on PHP+MySql technology. His message board cms/gbook.php has a backend command execution vulnerability due to the system not validating incoming content. An attacker is allowed to exploit this vulnerability to execute arbitrary commands...
CVE-2009-5095
PHP remote file inclusion vulnerability in indexinc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the incordner parameter...
CVE-2004-2351
Cross-site scripting XSS vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including 1 name, 2 email, 3 city, and 4 message, which do not use the and tags, which are filtered by PHP-Nuke...
CVE-2002-1560
index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true...
gBook 1.4 - Administrative Access
gBook 1.4 - Administrative Access source: https://www.securityfocus.com/bid/6033/info A vulnerability has been discovered in gBook v1.4. It has been reported that it is possible for an unauthorized attacker to gain administrative access to gBook by passing a malicious request to a php script...
gBook 1.4 - Administrative Access
source: https://www.securityfocus.com/bid/6033/info A vulnerability has been discovered in gBook v1.4. It has been reported that it is possible for an unauthorized attacker to gain administrative access to gBook by passing a malicious request to a php script. Exploiting this issue could allow...
CVE-2000-1131
Bill Kendrick web site guestbook GBook allows remote attackers to execute arbitrary commands via shell metacharacters in the MAILTO form variable...