SubberZ-lite.txt

Chironex Fleckeri SubberZLite - Remote File Include Find by Chironex Fleckeri Mail/MSN: [email protected] http://site/path/user-func.php?myadmindir=Shell...

CVE-2006-3689

The CVE-2006-3689 vulnerability affects Codeworks Gnomedia SubberZ[Lite], specifically in user-func.php where a PHP remote file inclusion can be triggered via the myadmindir parameter. The root cause is insecure handling of the myadmindir value that enables arbitrary PHP code execution when combi...

CVE-2006-3689

PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZLite allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any...

PT-2006-4555 · Codeworks · Codeworks Gnomedia Subberz[Lite]

Name of the Vulnerable Software and Affected Versions: Codeworks Gnomedia SubberZLite affected versions not specified Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter in the user-func.php file. However, a third party has disputed...

Subberz Lite - UserFunc Remote File Inclusion

Subberz Lite - UserFunc Remote File Inclusion source: https://www.securityfocus.com/bid/18990/info SubberZLite is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containi...

SubberZ[Lite] - Remote File Include

Chironex Fleckeri SubberZLite - Remote File Include Find by Chironex Fleckeri Mail/MSN: [email protected] http://site/path/user-func.php?myadmindir=Shell...

Subberz Lite - UserFunc Remote File Inclusion

source: https://www.securityfocus.com/bid/18990/info SubberZLite is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

CVE-2006-3266

Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 header parameter to a conad/include/rootGui.inc.php and b include/rootGui.inc.php; 2 mysqlCall parameter to...

CVE-2006-3266

Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 header parameter to a conad/include/rootGui.inc.php and b include/rootGui.inc.php; 2 mysqlCall parameter to...

CVE-2006-3266

Bee-hive Lite 1.2 and earlier is affected by multiple PHP remote file inclusion vulnerabilities when register_globals is enabled. The weaknesses allow an attacker to execute arbitrary PHP code by supplying URLs in various parameters across several scripts, including header, mysqlCall, mysqlcall, ...

CVE-2006-3037

ST AdManager Lite (publish.php) has multiple XSS vulnerabilities disclosed, allowing remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, (3) article, (4) bio, and (5) name parameters. The description specifies the affected software/component and the vulnera...

CVE-2006-3037

Multiple cross-site scripting XSS vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 description, 3 article, 4 bio, and 5 name parameters...

Sql injection

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

CVE-2006-2973

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

CVE-2006-2973

CVE-2006-2973 involves multiple SQL injection vulnerabilities in month.php of PHP Lite Calendar Express 2.2 . The issue allows remote attackers to execute arbitrary SQL commands via the (1) and (2) parameters, potentially affecting the application’s database through the affected page. The CVSS ...

CVE-2006-2973

Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...

ST AdManager Lite v1

ST AdManager Lite v1 Homepage: http://www.site-trade.com/index.php Effected files: index.php submit.php input form XSS Vulnerabilities: submit.php input forms do not correctly sanatize user input before submitting it to be checked by an admin and then published. This in turn to allow a user to...

CVE-2006-2871

PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter. NOTE: CVE disputes this issue, since $scriptpath is set to a constant value...

CyBoards PHP Lite v1.25 (common.PHP) Remote File Inclusion

CyBoards PHP Lite v1.25 common.PHP Remote File Inclusion Credit : SpC-x | The-BeKiR Site : http://wWw.SaVSaK.CoM Greetz : | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/include/common.php?scriptpath=CmdShell Common.PHP :...

PT-2006-3789 · Cyboards · Cyboards Php Lite

Name of the Vulnerable Software and Affected Versions: CyBoards PHP Lite version 1.25 Description: A remote file inclusion issue exists due to the script path parameter in include/common.php, potentially allowing remote attackers to execute arbitrary PHP code via a URL. Recommendations: For...