pnphpbb2-lfi.txt

.-----------------------------------------------------------------------------. | vuln.: PNphpBB2 = 1.2i printview.php phpEx Local File Inclusion Vuln. | | download: http://www.pnphpbb.com/ | | dorks: Powered by PNphpBB2 / Powered por PNphpBB2 | | inurl:"index.php?name=PNphpBB2" | | | | author:...

CVE-2007-6559

Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL commands via 1 the from parameter to index.php or 2 the page parameter to update.php...

CVE-2007-6545

Multiple cross-site scripting XSS vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via 1 the subject parameter to modules/news/submit.php; 2 the PATHINFO to modules/news/index.php, possibly related to the XoopsPageNav class; or 3 an avatar image...

CVE-2007-6539

The CVE-2007-6539 entry concerns a PHP local file inclusion in the IDevspot iSupport 1.8 product. The vulnerability arises from index.php’s include_file parameter, enabling remote attackers to include local files. Documented impact is partial confidentiality, integrity, and availability, with a C...

CVE-2007-6539: Improper Control of Generation of Code

PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the includefile parameter...

ThemeSiteScript 1.0 (index.php loadadminpage) RFI Vulnerability

Exploit for unknown platform in category web applications =============================================================== ThemeSiteScript 1.0 index.php loadadminpage RFI Vulnerability =============================================================== . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN...

ThemeSiteScript 1.0 - index.php?loadadminpage Remote File Inclusion

ThemeSiteScript 1.0 - index.php?loadadminpage Remote File Inclusion . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNN...

mBlog 'index.php'本地文件包含漏洞

mBlog是一款基于PHP的WEB应用程序。 mBlog不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于'index.php'脚本对用户提交的WEB参数缺少过滤，提交远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 C97.net mBlog 1.2 目前没有解决方案提供： http://www.c97.net/product.php?p=mblog...

Unfixed XSS vulnerability at www.chilli.cc

Security researcher TreX, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting www.chilli.cc, which at the time of submission ranked 1267507 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...

mBlog 1.2 (page) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================== mBlog 1.2 page Remote File Disclosure Vulnerability ===================================================== :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Falcon Series One CMS 1.4.3 allows remote attackers to change a password via a certain changepass action to index.php...

CVE-2007-6484

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6484

CVE-2007-6484 describes an SQL injection vulnerability in phpRPG 0.8, exploitable via the password parameter in index.php. Multiple sources (NVD, Red Hat, CVE lists) corroborate the issue, with provenance noted as originating from third-party information. The exploitation status is not detailed i...

CVE-2007-6484

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery fotoshow action...

Sql injection

SQL injection vulnerability in index.php in phpRPG 0.8, when magicqutoesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-6469

SQL injection vulnerability in index.php in phpRPG 0.8, when magicqutoesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-6466: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the prod parameter in a details action, 2 the cat parameter in a browse list action, or 3 the group parameter in a categories action. NOTE: it was later reported...

CVE-2007-6484: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...