55 matches found
CVE-2008-0433
CVE-2008-0433 concerns Agares phpAutoVideo 2.21 and earlier, where a PHP remote file inclusion flaw exists in theme/phpAutoVideo/LightTwoOh/sidebar.php. The underlying issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the loadpage parameter. This entry is corrob...
CVE-2008-0432: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in phpAutoVideo 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2008-0433: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares phpAutoVideo 2.21 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter, a different vector than CVE-2007-6614...
Agares PhpAutoVideo 2.21(XSS/RFI) Multiple Remote Vulnerabilities
----------------------------------------------------------------------------------- - Author : H-T Team HouSSaMix & ToXiC350 From MoRoCCo - ----------------------------------------------------------------------------------- Script : Agares PhpAutoVideo 2.21 and below Download :...
agares-xssrfi.txt
----------------------------------------------------------------------------------- - Author : H-T Team HouSSaMix & ToXiC350 From MoRoCCo - ----------------------------------------------------------------------------------- Script : Agares PhpAutoVideo 2.21 and below Download :...
phpAutoVideo 2.21 - index.php?cat Cross-Site Scripting
phpAutoVideo 2.21 - index.php?cat Cross-Site Scripting source: https://www.securityfocus.com/bid/27346/info phpAutoVideo is prone to a cross-site scripting vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit these...
phpAutoVideo 2.21 - 'sidebar.php?loadpage' Remote File Inclusion
source: https://www.securityfocus.com/bid/27346/info phpAutoVideo is prone to a cross-site scripting vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to execute arbitrary code within the context of...
phpAutoVideo 2.21 - 'index.php?cat' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27346/info phpAutoVideo is prone to a cross-site scripting vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to execute arbitrary code within the context of...
phpAutoVideo 2.21 - sidebar.php?loadpage Remote File Inclusion
phpAutoVideo 2.21 - sidebar.php?loadpage Remote File Inclusion source: https://www.securityfocus.com/bid/27346/info phpAutoVideo is prone to a cross-site scripting vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploi...
Sql injection
SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter...
CVE-2008-0262
SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter...
CVE-2008-0262
CVE-2008-0262 describes an SQL injection vulnerability in Agares PhpAutoVideo 2.21. The flaw is triggered via the articlecat parameter in includes/articleblock.php, allowing remote attackers to execute arbitrary SQL commands. CVSS metrics (NVD) indicate high severity with network access, low atta...
CVE-2008-0262
SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter...
CVE-2008-0262: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter...
Agares PhpAutoVideo 2.21 (articlecat) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit ================================================================== !/usr/bin/perl Agares PhpAutoVideo 2.21...
Agares phpAutoVideo 2.21 - 'articlecat' SQL Injection (2)
!/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...
Agares phpAutoVideo 2.21 - 'articlecat' SQL Injection (1)
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Agares PhpAutoVideo v2.21 Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz bug found by ka0x concat: ka0x01atgmail.com from spain vulnerability...
Agares phpAutoVideo 2.21 - articlecat SQL Injection (1)
Agares phpAutoVideo 2.21 - articlecat SQL Injection 1 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Agares PhpAutoVideo v2.21 Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz bug found by...
Agares PhpAutoVideo 2.21 (articlecat) SQL Injection Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Agares PhpAutoVideo v2.21 Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz bug found by ka0x concat:...
agares-sql.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Agares PhpAutoVideo v2.21 Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz bug found by ka0x concat: ka0x01atgmail.com from spain vulnerability...