Lucene search
+L

14 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2009-1442

Malware in sbrugna...

7.5CVSS6.4AI score0.02342EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2002-0448

Malware in sbrugna...

7.5CVSS6.4AI score0.07177EPSS
SaveExploits2References5
VulnCheck KEV
VulnCheck KEV
•added 2023/12/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2022-0679

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure of...

9.8CVSS8.2AI score0.4783EPSS
SaveIn wildExploits2References673
OSV
OSV
•added 2022/03/28 6:15 p.m.•10 views

CVE-2022-0679

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure of...

9.8CVSS7.4AI score0.4783EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/28 12:00 a.m.•3 views

CVE-2022-0679: Improper Limitation of a Pathname to a Restricted Directory

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure of...

9.8CVSS8.2AI score0.4783EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2009/04/27 7:00 p.m.•31 views

CVE-2009-1444

PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...

7.5AI score0.02342EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/27 12:00 a.m.•4 views

CVE-2009-1444: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...

7.5CVSS6.4AI score0.02342EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2007/03/27 1:00 a.m.•47 views

CVE-2007-1708

PHP remote file inclusion vulnerability in lib/db/ezsql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...

7.6AI score0.02785EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/03/27 12:00 a.m.•4 views

CVE-2007-1708: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/db/ezsql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...

7.5CVSS6.4AI score0.02785EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2007/03/25 12:00 a.m.•213 views

ttCMS <= v4 (ez_sql.php lib_path) Remote File Inclusion Vulnerability

DEVIL TEAM - HACKING POLISH TEAM Author: Kacper a.k.a Rahim Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam -------------------------------------------- Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. ttCMS = v4 ezsql.php libpath RFI...

0.6AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/02 12:00 a.m.•4 views

CVE-2006-5123: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Albrecht Guenther PHProjekt 5.1.x before 5.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 libpath or 2 langpath parameter in unspecified files, related to code changes intended to fix inclusion, a different...

7.5CVSS6.5AI score0.02169EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/08/17 12:00 a.m.•3 views

CVE-2006-4204: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathpre parameter in lib/specialdays.php and the 2 libpath parameter in lib/dbmanfilter.inc.php...

7.5CVSS6.4AI score0.0813EPSS
SaveExploits1References2
CVE
CVE
•added 2003/04/02 5:00 a.m.•99 views

CVE-2002-0451

PHProjekt 3.1 and 3.1a contain a remote PHP code execution vulnerability in filemanager_forms.php. The issue arises from unsafely handling the lib_path parameter, allowing an attacker to specify a URL to executable code, enabling arbitrary code execution on the affected server. The CVE entry prov...

7.5CVSS7.9AI score0.07177EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/04/02 12:00 a.m.•3 views

CVE-2002-0451: Undefined Security Weakness

filemanagerforms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the libpath parameter...

7.5CVSS6.3AI score0.07177EPSS
SaveExploits2References1
Rows per page
Query Builder