News Script PHP 1.2 - Multiple Vulnerabilities

Title: ====== News Script PHP v1.2 - Multiple Web Vulnerabilites Date: ===== 2012-06-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=600 VL-ID: ===== 600 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Visitor...

News Script PHP Pro (fckeditor) File Upload Vulnerability

Exploit for php platform in category web applications » Title : News Script PHP Pro fckeditor File Upload Vulnerability » Script : News Script PHP Pro » TestedON: linux/php » Download: http://newsscriptphp.com/ » Author : Net.Edit0r » Email : email protected » Date : 2010-12-26 » Version ...

News Script PHP Pro Shell Upload

============================================================================== » News Script PHP Pro fckeditor File Upload Vulnerability ============================================================================== » Title : News Script PHP Pro fckeditor File Upload Vulnerability » Script : News...

News Script PHP Pro - FCKeditor Arbitrary File Upload

News Script PHP Pro - FCKeditor Arbitrary File Upload ============================================================================== » News Script PHP Pro fckeditor File Upload Vulnerability ============================================================================== » Title : News Script PHP P...

News Script PHP Pro - 'FCKeditor' Arbitrary File Upload

============================================================================== » News Script PHP Pro fckeditor File Upload Vulnerability ============================================================================== » Title : News Script PHP Pro fckeditor File Upload Vulnerability » Script : News...

mini CMS / News Script Light 1.0 Remote File Inclusion

!/usr/bin/perl mini CMS / News Script Light 1.0 Remote File Include Exploit Bug found and exploit written by bd0rk || SOH-Crew Vendor: http://www.hinnendahl.com/ Downloadsite: http://www.hinnendahl.com/index.php?seite=download Description: The scriptpfad parameter in newsbase.php isn't declared...

Leech's News script v0.8 SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Leech's News script v0.8 SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

HB-NS 1.3 Administrative Access

====================================================== news script HB-NS v1.3 Remote Admin Vulnerability Found by: kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org ======================================================= +++++++++++++++++++ Script...

Sql injection

SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-3582

SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-3582

SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-3582

CVE-2008-3582 describes an SQL injection in login.php of Keld PHP-MySQL News Script 0.7.1, allowing remote attackers to execute arbitrary SQL via the username parameter. Affected component: login.php (Keld PHP-MySQL News Script 0.7.1). Root cause: unsafely constructed SQL in login form. Impact: p...

CVE-2007-2708

PHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News News-Script 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the action parameter...

CVE-2007-2708

Summary: CVE-2007-2708 describes a PHP remote file inclusion in Feindt Computerservice News (News-Script) 2.0, specifically in newsadmin.php where an attacker can supply a URL in the action parameter to execute PHP code on the server. The connected Exploit Pack entry (CANVAS) labels it as a remot...

nunenews-rfi.txt

----------------------------------------------- NUNE News Script customadminpath Remote File Include Vulnerablity ----------------------------------------------- Author: xoron ----------------------------------------------- Code: if isset$customadminpath $specialadminpath = $customadminpath; else...

CVE-2007-0143

CVE-2007-0143 affects NUNE News Script 2.0pre2. The vulnerability is a PHP remote file inclusion triggered via a URL in the custom_admin_path parameter to (1) index.php or (2) archives.php, enabling remote attackers to execute arbitrary PHP code. The description and connected records confirm this...

CVE-2007-0143

Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a URL in the customadminpath parameter to 1 index.php or 2 archives.php...

EUVD-2007-0147

Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a URL in the customadminpath parameter to 1 index.php or 2 archives.php...

NUNE News Script (custom_admin_path) Remote File Include Vulnerablity

----------------------------------------------- NUNE News Script customadminpath Remote File Include Vulnerablity ----------------------------------------------- Author: xoron ----------------------------------------------- Code: if isset$customadminpath $specialadminpath = $customadminpath; else...

NUNE News Script 2.0pre2 Multiple Remote File Include Vulnerabilities

No description provided by source. ----------------------------------------------- NUNE News Script customadminpath Remote File Include Vulnerablity ----------------------------------------------- Author: xoron ----------------------------------------------- Code: if isset$customadminpath...