171 matches found
paFileDB 3.5.2/3.5.3 Remote Login Bypass SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== paFileDB 3.5.2/3.5.3 Remote Login Bypass SQL Injection Vulnerability ==================================================================== PafileDB Login SQL injection =...
paFileDB 3.5.2/3.5.3 - Remote Authentication Bypass / SQL Injection
PafileDB Login SQL injection = author : koray & [email protected] Risk : High Class : Remote Vulnerable Script : pafileDB Version : 3.5.2 / 3.5.3 google : powered by pafiledb 3.5.3/2 greetz : www.cigicigi.net & redhackers Vulnerable; include/admin/auth.php c0de ; if isset$COOKIE'pafiledbuser' &&...
XSS IN paFileDB 3.1
XSS IN paFileDB 3.1 BY b0rizQ ------------------- ZARLOULE04 at HOTMAIL dot FR ------------------------------------------------- FILE : pafiledb.php Dork : PHP Arena http://traget/pafiledb.php?action=category&id=1"scriptalertdocument.cookie;/script ------------------------------------------------...
Remote file inclusion
PHP remote file inclusion vulnerability in pafiledbconstants.php in Download Manager mxBB pafiledb integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...
CVE-2006-2361
CVE-2006-2361 describes a PHP remote file inclusion in pafiledb_constants.php within the Download Manager (mxBB pafiledb) integration used with phpBB. The underlying issue is an attacker-controlled URL in the module_root_path parameter that can lead to arbitrary PHP code execution on the server. ...
pafileDB <= 2.0.1 (mxBB/phpBB) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== pafileDB = 2.0.1 mxBB/phpBB Remote File Inclusion Vulnerability ================================================================== PafileDB Remote File InclusionphpBB Conta...
pafileDB 2.0.1 - mxBBphpBB Remote File Inclusion
pafileDB 2.0.1 - mxBBphpBB Remote File Inclusion PafileDB Remote File InclusionphpBB Contact : irc.gigachat.net ir4dex & [email protected] Risk : High Class : Remote Script : pafileDB Version : not specified --------------------------------------------------------------------- Vulnerable...
phpRaid <= 3.0.b3 (phpBB/SMF) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== pafileDB = 2.0.1 mxBB/phpBB Remote File Inclusion Vulnerability ================================================================== PafileDB Remote File InclusionphpBB Conta...
pafileDB <= 2.0.1 (mxBB/phpBB) Remote File Inclusion Vulnerability
No description provided by source. PafileDB Remote File InclusionphpBB Contact : irc.gigachat.net ir4dex & [email protected] Risk : High Class : Remote Script : pafileDB Version : not specified --------------------------------------------------------------------- Vulnerable code :...
pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion
PafileDB Remote File InclusionphpBB Contact : irc.gigachat.net ir4dex & [email protected] Risk : High Class : Remote Script : pafileDB Version : not specified --------------------------------------------------------------------- Vulnerable code : $linklanguage = 'langenglish'; include...
CVE-2005-4329
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 newsid and 2 id parameter...
CVE-2005-4329
CVE-2005-4329 affects PHP Arena paFileDB Extreme Edition RC 5 and earlier . The vulnerability is a SQL injection in the file pafiledb.php , allowing remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameters. The initial details show a network attack vector with a...
paFileDB Extreme Edition SQL inj
paFileDB Extreme Edition SQL inj Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/pafiledb-extreme-edition-sql-inj.html vendor:http://pafiledb.byethost15.com/ affected version:RC 5 and prior Product Description: The core of this script is based on...
CVE-2005-2723
SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie...
CVE-2005-2723
CVE-2005-2723 refers to a SQL injection in PaFileDB 3.1’s auth.php when authmethod is configured to cookies, exploitable via the pafiledbcookie cookie username value. Multiple sources confirm the issue and indicate the remote attacker could potentially manipulate SQL commands, with at least one N...
CVE-2005-2723
SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie...
PaFileDB 3.1 - SQL-Injection
SePro Advisory 5 PaFileDB 3.1 - SQL-Injection =========================================================== Vendor: PhpArena URL: http://www.phparena.net/ Date: 17.08.05 App.: PaFileDB Version: 3.1 Type: SQL-Injection Risc: High Credits: ================================ Newangels &...
paFileDB auth.php pafiledbcookie Cookie SQL Injection
The remote version of paFileDB suffers from a flaw by which an attacker can gain access to the application's administrative control panel by means of a SQL injection attack via a specially crafted cookie. Note that successful exploitation requires that paFileDB be configured with '$authmethod' se...
PaFileDB31SQL.txt
SePro Advisory 5 PaFileDB 3.1 - SQL-Injection =========================================================== Vendor: PhpArena URL: http://www.phparena.net/ Date: 17.08.05 App.: PaFileDB Version: 3.1 Type: SQL-Injection Risc: High Credits: ================================ Newangels &...