9754 matches found
Fast Click SQL Lite <= 1.1.3 Remote File Inclusion
Fast Click SQL Lite = 1.1.3 Remote File Inclusion ------------------------------------------------------- Aria-security.com advisory Bug Discovered by R@1D3N amin emami email:[email protected] and [email protected] Date:02/05/2006 original...
Fast Click SQL Lite 1.1.2/1.1.3 - 'show.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/17819/info Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...
Fast Click SQL Lite 1.1.21.1.3 - show.php Remote File Inclusion
Fast Click SQL Lite 1.1.21.1.3 - show.php Remote File Inclusion source: https://www.securityfocus.com/bid/17819/info Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can...
Sql injection
Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to execute arbitrary SQL commands via the 1 banner parameter in agentlinks.pl; the offset parameter in 2 agentlinks.pl, 3 agenttransactions.pl, 4...
CVE-2006-2063
Multiple cross-site scripting XSS vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in 1 agentaffil.pl, 2 agenthelp.pl, 3 agentfaq.pl, 4 agenthelpinsert.pl, 5...
CVE-2006-2062
CVE-2006-2062 involves multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1 (and likely the Network Version “Full Version”). The description lists specific injectable parameters across scripts: (1) banner in agent_links.pl; (2) offset in agent_links.pl; (3) agent_transactions.pl;...
CVE-2006-2063
CVE-2006-2063 involves multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1 (and likely the Network Version “Full Version”). The weaknesses allow injection of arbitrary script/HTML via the login parameter across a long list of PHP scripts (e.g., agent_affil.pl, agent...
CVE-2006-2063: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in 1 agentaffil.pl, 2 agenthelp.pl, 3 agentfaq.pl, 4 agenthelpinsert.pl, 5...
CVE-2006-2027: Undefined Security Weakness
Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server Professional and Lite, probably 3.0, allows remote authenticated users to execute arbitrary code by sending a command with a long argument, which triggers a buffer overflow when...
CVE-2006-2062: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to execute arbitrary SQL commands via the 1 banner parameter in agentlinks.pl; the offset parameter in 2 agentlinks.pl, 3 agenttransactions.pl, 4...
Remote file inclusion
PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...
CVE-2006-1959
PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...
CVE-2006-1959: Undefined Security Weakness
PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...
[MajorSecurity]ActualAnalyzer - Remote File Include Vulnerability
MajorSecurityActualAnalyzer - Remote File Include Vulnerability ----------------------------------------------------------- Software: ActualAnalyzer Type: Remote File Include Vulnerability Date: April, 19th 2006 Vendor: ActualScripts Page: http://actualscripts.com Risc: High Credits:...
[eVuln] CyBoards PHP Lite SQL Injection Vulnerability
New eVuln Advisory: CyBoards PHP Lite SQL Injection Vulnerability http://evuln.com/vulns/91/summary.html --------------------Summary---------------- eVuln ID: EV0091 CVE: CVE-2006-1134 Software: CyBoards PHP Lite Sowtware's Web Site:...
CyBoards PHP Lite 1.21/1.25 - 'post.php' SQL Injection
source: https://www.securityfocus.com/bid/17107/info CyBoards PHP Lite is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise...
CyBoards PHP Lite 1.211.25 - post.php SQL Injection
CyBoards PHP Lite 1.211.25 - post.php SQL Injection source: https://www.securityfocus.com/bid/17107/info CyBoards PHP Lite is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...
Sql injection
SQL injection vulnerability in CyBoards PHP Lite 1.25, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to 1 post.php and possibly 2 processpost.php...
CVE-2006-1134
SQL injection vulnerability in CyBoards PHP Lite 1.25, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to 1 post.php and possibly 2 processpost.php...
CVE-2006-1134
SQL injection vulnerability in CyBoards PHP Lite 1.25, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to 1 post.php and possibly 2 processpost.php...