CyBoards PHP Lite 1.21/1.25 - 'Common.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/18272/info CyBoards PHP Lite is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the...

CyBoards PHP Lite 1.211.25 - Common.php Remote File Inclusion

CyBoards PHP Lite 1.211.25 - Common.php Remote File Inclusion source: https://www.securityfocus.com/bid/18272/info CyBoards PHP Lite is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it...

CVE-2006-2681

PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when registerglobals and magicquotes are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 index.php and 2 inc-common.php...

Remote file inclusion

PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when registerglobals and magicquotes are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 index.php and 2 inc-common.php...

CVE-2006-2681

CVE-2006-2681 describes a PHP remote file inclusion in SocketMail Lite and Pro 2.2.6 and earlier. When both register_globals and magic_quotes are enabled, an attacker can supply a URL in the site_path parameter to (1) index.php or (2) inc-common.php to execute arbitrary PHP code on the server. Th...

CVE-2006-2681

PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when registerglobals and magicquotes are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 index.php and 2 inc-common.php...

Socketmail 2.2.6 - 'site_path' Remote File Inclusion

Title: Socketmail = 2.2.6 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: Creative Digital Resources URL: http://socketmail.com ----------------------------------------------------------------- Credits: Discovered by: 'Aesthetico'...

CVE-2006-2241

PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: This is a different vulnerability than CVE-2006-2175...

Remote file inclusion

PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: This is a different vulnerability than CVE-2006-2175...

CVE-2006-2241

CVE-2006-2241 : PHP remote file inclusion in Fast Click SQL Lite 1.1.3 and earlier via a crafted URL in the path parameter to show.php enables remote code execution. Root cause is the unsanitized path parameter; condition is non-privileged, remote attacker could exploit. No remediation details ar...

CVE-2006-2241

PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: This is a different vulnerability than CVE-2006-2175...

Fast Click SQL Lite <= 1.1.3 Remote File Inclusion

Fast Click SQL Lite = 1.1.3 Remote File Inclusion ------------------------------------------------------- Aria-security.com advisory Bug Discovered by R@1D3N amin emami email:[email protected] and [email protected] Date:02/05/2006 original...

Fast Click SQL Lite 1.1.21.1.3 - show.php Remote File Inclusion

Fast Click SQL Lite 1.1.21.1.3 - show.php Remote File Inclusion source: https://www.securityfocus.com/bid/17819/info Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can...

Fast Click SQL Lite 1.1.2/1.1.3 - 'show.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17819/info Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

Sql injection

Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to execute arbitrary SQL commands via the 1 banner parameter in agentlinks.pl; the offset parameter in 2 agentlinks.pl, 3 agenttransactions.pl, 4...

CVE-2006-2063

Multiple cross-site scripting XSS vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in 1 agentaffil.pl, 2 agenthelp.pl, 3 agentfaq.pl, 4 agenthelpinsert.pl, 5...

CVE-2006-2063

CVE-2006-2063 involves multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1 (and likely the Network Version “Full Version”). The weaknesses allow injection of arbitrary script/HTML via the login parameter across a long list of PHP scripts (e.g., agent_affil.pl, agent...

CVE-2006-2062

CVE-2006-2062 involves multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1 (and likely the Network Version “Full Version”). The description lists specific injectable parameters across scripts: (1) banner in agent_links.pl; (2) offset in agent_links.pl; (3) agent_transactions.pl;...

Remote file inclusion

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...

CVE-2006-1959

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...