132 matches found
jetboxCMSinclude.txt
Jetbox CMS searchfunction.php Remote File Include F0und by : D3nGeR E-mail : [email protected] the code include $relativescriptpath.'/libs/htmlheader.php The Expl dork : powered by Jetbox CMS www.sitename.com/path/includes/phpdig/libs/searchfunction.php?relativescriptpath=Evil Code...
Jetbox CMS search_function.php Remote File
Jetbox CMS searchfunction.php Remote File Include F0und by : D3nGeR E-mail : [email protected] the code include $relativescriptpath.'/libs/htmlheader.php The Expl dork : powered by Jetbox CMS www.sitename.com/path/includes/phpdig/libs/searchfunction.php?relativescriptpath=Evil Code...
Jetbox CMS 2.1 - Search_function.php Remote File Inclusion
Jetbox CMS 2.1 - Searchfunction.php Remote File Inclusion source: https://www.securityfocus.com/bid/19722/info Jetbox CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote fi...
Jetbox CMS 2.1 - 'Search_function.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19722/info Jetbox CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...
CVE-2006-3584
Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables...
CVE-2006-3585
Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the 1 login parameter in admin/cms/index.php, 2 unspecified parameters in the "Supply news" page in formmail.php, 3 the URL in the "Site statistics" page, and...
CVE-2006-3583
Session fixation vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to hijack web sessions via a crafted link and the administrator section...
CVE-2006-3586
SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the 1 frontsession COOKIE parameter and 2 view parameter in index.php, and the 3 login parameter in admin/cms/index.php...
CVE-2006-3585
Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the 1 login parameter in admin/cms/index.php, 2 unspecified parameters in the "Supply news" page in formmail.php, 3 the URL in the "Site statistics" page, and...
CVE-2006-3583
Session fixation vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to hijack web sessions via a crafted link and the administrator section...
CVE-2006-3584
Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables...
CVE-2006-3586
Jetbox CMS 2.1 SR1 is affected by CVE-2006-3586 due to unsanitized input leading to SQL injection in index.php (frontsession cookie and view parameter) and in admin/cms/index.php (login parameter). Exploitation could allow remote attackers to execute arbitrary SQL commands, potentially impacting ...
CVE-2006-3583
CVE-2006-3583 describes a session- fixation vulnerability in Jetbox CMS 2.1 SR1 . The root cause involves login/session handling flaws and unsanitised input in server-side scripts (notably in index.php and admin/cms/index.php), enabling an attacker to hijack a user’s session via a crafted link an...
CVE-2006-3585
CVE-2006-3585 describes multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1. Affected components include: the login parameter in admin/cms/index.php; parameters on the Supply news page in formmail.php; the URL in the Site statistics page; and the query_string parameter when ...
CVE-2006-3586
SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the 1 frontsession COOKIE parameter and 2 view parameter in index.php, and the 3 login parameter in admin/cms/index.php...
CVE-2006-3584
CVE-2006-3584 affects Jetbox CMS 2.1 SR1. The vulnerability is in index.php where inputs passed in the URL are evaluated as PHP variable variables, allowing remote attackers to overwrite configuration variables. This is caused by improper handling/sanitization of URL parameters and can lead to di...
[Full-disclosure] Secunia Research: Jetbox Multiple Vulnerabilities
====================================================================== Secunia Research 02/08/2006 - Jetbox Multiple Vulnerabilities - ====================================================================== Table of Contents Affected Software....................................................1...
CVE-2006-2270
PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL in the relativescriptpath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL in the relativescriptpath parameter...