CVE-2007-5131

CVE-2007-5131 affects Interspire ActiveKB NX 2.x. The vulnerability is a SQL injection in index.php when handling the browse action via the catId parameter, enabling remote execution of arbitrary SQL commands. Note that ActiveKB 1.5 is also reported to be affected. The linked references confirm t...

CVE-2007-4872: Undefined Security Weakness

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php; or a direct request to 2 admin/dbginfos.php, 3 admin/heading.php, or 4 evsearch.php; which reveals the path in various error messages...

CVE-2007-5131: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...

CVE-2007-5130: Improper Input Validation

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...

CVE-2007-5109

Cross-site request forgery CSRF vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified 1 regpass and 2 level parameters in a noneLogin action, as demonstrated by using...

Sql injection

SQL injection vulnerability in index.php in the Arcade module in bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a playgame action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5104

SQL injection vulnerability in index.php in the Arcade module in bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a playgame action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5104

The provided connected records describe SQL injection vulnerabilities in the bcoos package (versions 1.0.10 and earlier). For CVE-2007-5104, remote attackers can inject via the gid parameter to modules/arcade/index.php in a show_stats action. For CVE-2007-6266, similar issues allow injection via ...

ActiveKB KnowledgeBase 2.x - catId SQL Injection

ActiveKB KnowledgeBase 2.x - catId SQL Injection ActiveKB NX 2.? Powered by ActiveKB Knowledgebase Software index.php SQL Injection Discovered by Luna-Tic and XTErner 19 Years Ukrainian Hackers Vendor:www.interspire.com/activekb/ License:sharewere Exploit:/kb/index.php?ToDo=browse&catId=SQL CODE...

CVE-2007-5109: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified 1 regpass and 2 level parameters in a noneLogin action, as demonstrated by using...

CVE-2007-5104: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Arcade module in bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a playgame action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

neuron-lfi.txt

\|/// \ - - // Y! Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Neuron News 1.0 Download : http://downloads.localhost.be/scripts/neuronnews.zip Author : Dj7xpl HomePage : http://r00t.ir / http://Dj7xpl.2600.ir Type : Local File Inclusion...

Sql injection

SQL injection vulnerability in index.php in phpFullAnnu PFA 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter...

CVE-2007-5068

SQL injection vulnerability in index.php in phpFullAnnu PFA 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter...

CVE-2007-5068

CVE-2007-5068 is a SQL injection vulnerability affecting phpFullAnnu (PFA) 6.0, where an attacker can inject arbitrary SQL via the mod parameter in index.php. The vulnerability is confirmed in multiple sources (NVD/NVD mirror entries) and has a base CVSS v2 score of 7.5 (HIGH) with network access...

CVE-2007-5050

The CVE-2007-5050 entry describes a directory traversal in Neuron News 1.0: index.php vulnerable to a ".." in the q parameter, permitting remote attackers to include and execute arbitrary local files. Affected software: Neuron News 1.0 (PHP). Root cause is improper input validation on q that perm...

CVE-2007-5068: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpFullAnnu PFA 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter...

CVE-2007-5061: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php in a banners action...

CVE-2007-5052: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with 1 the title parameter or 2 a "title=" sequence in the PATHINFO, or a request to the download module with 3 the cat...

CVE-2007-5060: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password and rpassword parameters, possibly related to timestamp values...