985 matches found
CVE-2007-2016
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2007-2008
Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
CVE-2007-2016
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2007-1933
Multiple directory traversal vulnerabilities in PcP-Guestbook PcP-Book 3.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 index.php, 2 gb.php, or 3 faq.php...
PcP-Guestbook 3.0 - 'lang' Local File Inclusion
.-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ Portal.......: PcP-Book 3.0 Site.........: http://www.pcp-system.at Down.........: http://www.ectona.org/download/?id=621&s=info Author.......: Dj7xpl | [email protected] ++ ++...
PT-2007-3204 · 2Bgal · 2Bgal
Name of the Vulnerable Software and Affected Versions: 2BGal version 3.1.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the lang filename parameter to 1 "index.php" or 2 "backupdb.inc.php" in admin/, or other unspecified files. Recommendations: For 2BG...
Sql injection
SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter...
CVE-2007-1450
SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter...
CVE-2007-1450
SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter...
CVE-2007-1449
CVE-2007-1449 affects PHP-Nuke 8.0 and earlier. A directory-traversal flaw in mainfile.php allows remote attackers to read arbitrary files by supplying ".." in the lang parameter, enabling partial confidentiality impact. Root cause: insufficient input validation in the lang parameter. The connect...
phptraffic-lfi.txt
------=Part1622826164291.1172086007407 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline phpTrafficA-1.4.1 Local File Inclusion phpTrafficA is a GPL statistical tool for web traffic analysis, written in php and mySQL. It can...
nsGalPHP (includes/config.inc.php racineTBS) Remote Inclusion Vuln
Exploit for unknown platform in category web applications ================================================================== nsGalPHP includes/config.inc.php racineTBS Remote Inclusion Vuln ================================================================== | | \ | S.W.A.T. | / \ | | / / || \ / ...
Bradabra <= 2.0.5 (include/includes.php) Remote Inclusion Vulnerability
No description provided by source. ====================================================================== Bradabra == v2.0.5 Remote File Include Vulnerability ====================================================================== Downlaoad Script :ftp://ftp1.comscripts.com/PHP/773bradabra-205.gz...
Oreon <= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...
Oreon 1.2.3 RC4 - langindex.php Remote File Inclusion
Oreon 1.2.3 RC4 - langindex.php Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...
Oreon <= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability
Exploit for unknown platform in category web applications ====================================================================== Oreon = 1.2.3 RC4 lang/index.php file Remote InclusionVulnerability ======================================================================...
Oreon 1.2.3 RC4 - '/lang/index.php' Remote File Inclusion
------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...
Sql injection
SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lang parameter...
Directory traversal
Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log fil...