Lucene search
+L

178 matches found

NVD
NVD
added 2007/03/27 9:19 p.m.19 views

CVE-2007-1715

PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the forgotpass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps...

7.5CVSS7.3AI score0.02441EPSS
SaveExploits1References3
CVE
CVE
added 2007/03/27 9:00 p.m.51 views

CVE-2007-1715

The CVE-2007-1715 issue affects Free Image Hosting 2.0 and earlier, with a vulnerability in frontpage.php that allows PHP code execution via a URL in the AD_BODY_TEMP parameter (remote file inclusion). The vulnerability arises from including remote files through user-controlled input, enabling ar...

7.5CVSS7.5AI score0.02441EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2007/03/27 9:00 p.m.34 views

CVE-2007-1715

PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the forgotpass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps...

7.3AI score0.02441EPSS
SaveExploits1References3
seebug.org
seebug.org
added 2007/03/26 12:00 a.m.21 views

Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns

No description provided by source. Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...

7.1AI score
SaveExploits0
zdt
zdt
added 2007/03/25 12:00 a.m.34 views

Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns

Exploit for unknown platform in category web applications ==================================================================== Free Image Hosting Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? : www.site.com/imageuploadpath/frontpage.php?ADBODYTEMP=Shell?...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2007/03/25 12:00 a.m.747 views

Image_Upload Script Remote File Inclusion Exploit Free Image Hosting 2.0

Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : tddiv align="center"?php include$ADBODYTEMP;?/div/td Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...

0.2AI score
SaveExploits0
seebug.org
seebug.org
added 2007/03/25 12:00 a.m.20 views

Free Image Hosting &lt;= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns

No description provided by source. Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : tddiv align="center"?php include$ADBODYTEMP;?/div/td Exploit :...

7.1AI score
SaveExploits0
NVD
NVD
added 2006/11/03 1:07 a.m.20 views

CVE-2006-5670

PHP remote file inclusion vulnerability in forgotpass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter...

7.5CVSS7.5AI score0.03179EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2006/11/03 1:00 a.m.25 views

CVE-2006-5670

PHP remote file inclusion vulnerability in forgotpass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter...

7.5AI score0.03179EPSS
SaveExploits2References6
CVE
CVE
added 2006/11/03 1:00 a.m.45 views

CVE-2006-5671

CVE-2006-5671 is a PHP remote file inclusion vulnerability affecting Free Image Hosting 1.0 and earlier. The issue is triggered via the AD_BODY_TEMP parameter in contact.php, allowing an attacker to supply a URL that leads to remote PHP code execution. The vulnerability is classified with a high ...

7.5CVSS7.7AI score0.01278EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2006/11/03 1:00 a.m.57 views

CVE-2006-5670

CVE-2006-5670 is a PHP-based remote file inclusion vulnerability in the free image hosting package (Free Image Hosting 1.0 and earlier). It allows an attacker to remotely execute arbitrary PHP code by supplying a crafted URL in the AD_BODY_TEMP parameter to forgot_pass.php. The vulnerability desc...

7.5CVSS7.6AI score0.03179EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2006/11/03 1:00 a.m.40 views

CVE-2006-5671

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

7.4AI score0.01278EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2006/10/28 12:00 a.m.11 views

Free Image Hosting 1.0 - forgot_pass.php File Inclusion

Free Image Hosting 1.0 - forgotpass.php File Inclusion !/usr/bin/php -q -d shortopentag=on | | \\ | | | | | | \ //----------------------- | DEVIL TEAM - POLISH TEAM \/ http://www.rahim.webd.pl/ . .\ . \ / | | ||/ | || / \ | \ / /\ | | / | \ \ | |/ \ / \ | \ | || | | | | \ | / //\ |...

SaveExploits0
Exploit DB
Exploit DB
added 2006/10/28 12:00 a.m.31 views

Free Image Hosting 1.0 - 'forgot_pass.php' File Inclusion

!/usr/bin/php -q -d shortopentag=on | | \\ | | | | | | \ //----------------------- | DEVIL TEAM - POLISH TEAM \/ http://www.rahim.webd.pl/ . .\ . \ / | | ||/ | || / \ | \ / /\ | | / | \ \ | |/ \ / \ | \ | || | | | | \ | / //\ | /|//|||| ||| /| / | | | | | \ | Free Image Hosting = 1.0...

7.5CVSS5.8AI score0.03179EPSS
SaveExploits2
exploitpack
exploitpack
added 2006/09/29 12:00 a.m.15 views

PHP Krazy Image Hosting 0.7a - display.php SQL Injection

PHP Krazy Image Hosting 0.7a - display.php SQL Injection ? /\ | PHP Krazy Image Host Script id Remote SQL Injection Exploit | | Discovered by: Trex | | Solution: http://www.trex-online.net/fixes/display.rar | | Visit: Trex-Online.net / UnderGround.ag | / errorreporting0; echo " PHP Krazy Image...

0.5AI score
SaveExploits0
seebug.org
seebug.org
added 2006/09/29 12:00 a.m.24 views

PHP Krazy Image Hosting 0.7a (display.php) SQL Injection Exploit

No description provided by source. ? /\ | PHP Krazy Image Host Script id Remote SQL Injection Exploit | | Discovered by: Trex | | Solution: http://www.trex-online.net/fixes/display.rar | | Visit: Trex-Online.net / UnderGround.ag | / errorreporting0; echo " PHP Krazy Image Host Script id Remote SQ...

7.1AI score
SaveExploits0
zdt
zdt
added 2006/09/29 12:00 a.m.45 views

PHP Krazy Image Hosting 0.7a (display.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ PHP Krazy Image Hosting 0.7a display.php SQL Injection Exploit ================================================================ ? /\ | PHP Krazy Image Host Script id Remote S...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/09/29 12:00 a.m.28 views

PHP Krazy Image Hosting 0.7a - 'display.php' SQL Injection

? /\ | PHP Krazy Image Host Script id Remote SQL Injection Exploit | | Discovered by: Trex | | Solution: http://www.trex-online.net/fixes/display.rar | | Visit: Trex-Online.net / UnderGround.ag | / errorreporting0; echo " PHP Krazy Image Host Script id Remote SQL Injection Exploit\n"; echo "...

7.5CVSS5.8AI score0.01089EPSS
SaveExploits2
Rows per page
Query Builder