30 matches found
EUVD-2006-4821
Malware in sbrugna...
EUVD-2006-4964
Malware in sbrugna...
EUVD-2006-4852
Malware in sbrugna...
phpQuiz <= 0.1.2 - Remote SQL Injection / Code Execution Exploit
No description provided by source...
PHPQuiz-v.1.2.txt
Title: PHPQuiz Download File phpquiz/imgquiz/ folder is by defaut writable so after uploading a simple phpshell...
CVE-2006-4978
Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the univers parameter in score.php and 2 the quizid parameter in home.php, accessed through the front/ URI...
CVE-2006-4979
The CVE-2006-4979 entry concerns a Direct static code injection vulnerability in cfgphpquiz/install.php for Walter Beschmout PhpQuiz 1.2 and earlier. The underlying flaw lets remote attackers inject arbitrary PHP code into config.inc.php by submitting modified configuration settings, enabling pot...
CVE-2006-4978
CVE-2006-4978 affects Walter Beschmout PhpQuiz 1.2 and earlier, with multiple SQL injection vulnerabilities. The weaknesses allow remote attackers to inject SQL via the univers parameter in score.php or the quiz_id parameter in home.php, accessed through the front/ URI. Documented impact is arbit...
CVE-2006-4977: Undefined Security Weakness
Multiple unrestricted file upload vulnerabilities in 1 back/uploadimg.php and 2 admin/uploadimg.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/imgquiz folder via the a upload, b okupdate, c image, and d path parameters, possibly...
CVE-2006-4979: Undefined Security Weakness
Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings...
CVE-2006-4978: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the univers parameter in score.php and 2 the quizid parameter in home.php, accessed through the front/ URI...
CVE-2006-4865
Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/install.php and other unspecified vectors...
CVE-2006-4865
Technical details about CVE-2006-4865 are not publicly provided in the supplied documents. No specifics on affected products, versions, or root cause are available here. Monitor for updates from official advisories and vulnerability databases.
CVE-2006-4865
Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/install.php and other unspecified vectors...
PHPQuiz Multiple Remote Vulnerabilites
Title: PHPQuiz = v.1.2 Remote SQL injection/Code Execution Exploit Vendor : PHPQuiz webiste : http://www.phpquiz.com Version : = v.1.2 Severity: Critical Author: Simo64 / simo64atmorxorg MorX Security Reseach Team http://www.morx.org http://www.morx.org/phpquiz.txt Details : SQL injection univers...
CVE-2006-4865: Undefined Security Weakness
Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/install.php and other unspecified vectors...
phpquiz.txt
phpQuiz sensitive file install.php without authentification + Files containing interesting info passwords for sql db By : sn0oPy Risk : verry high Site : http://phpquiz.com/ Dork : intitle:"phpQuiz" | " Développé par PhpQuiz v.1.0 " | "© PhpQuiz" | inurl:"PhpQuiz" exploit :...
phpQuiz <= 0.1.2 Remote SQL Injection / Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================== phpQuiz Download File input name="image" type="file...
phpQuiz <= 0.1.2 Remote SQL Injection / Code Execution Exploit
No description provided by source. Title: PHPQuiz = v.1.2 Remote SQL injection/Code Execution Exploit Vendor : PHPQuiz webiste : http://www.phpquiz.com Version : = v.1.2 Severity: Critical Author: Simo64 / simo64atmorxorg MorX Security Reseach Team http://www.morx.org...
