CVE-2014-8340: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Php/Functions/logfunction.php in phpTrafficA 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via a User-Agent HTTP header...

phpTrafficA 2.3 SQL Injection Vulnerability

phpTrafficA versions 2.3 and below suffer from a remote SQL injection vulnerability. Product: phpTrafficA Product page: http://soft.zoneo.net/phpTrafficA/ Affected versions: Up to and including 2.3 latest as of writing. Description: An SQL injection exists in Php/Functions/logfunction.php, line...

phpTrafficA 2.3 SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: phpTrafficA Product page: http://soft.zoneo.net/phpTrafficA/ Affected versions: Up to and including 2.3 latest as of writing. Description: An SQL injection exists in Php/Functions/logfunction.php, line 933: $sql3 ="INSERT INTO $tablehost SET...

phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability

No description provided by source. Application: phpTrafficA = 1.4.2 Web Site: http://soft.zoneo.net/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1...

phpTrafficA 1.4.1 plotStat.php file Parameter Traversal Local File Inclusion

No description provided by source...

phpTrafficA 1.4.1 banref.php lang Parameter Traversal Local File Inclusion

No description provided by source...

CVE-2007-3647

The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from third party information...

CVE-2007-3647

CVE-2007-3647 affects phpTrafficA 1.4.3 and earlier. The isloggedin() function in Php/login.inc.php permits remote bypass of authentication by setting the username cookie to "traffic", thereby gaining administrative access. No remediation details are provided in the supplied documents.

CVE-2007-3647

The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from third party information...

CVE-2007-3647: Undefined Security Weakness

The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from third party information...

phpTrafficA &lt;=1.4.3 Admin Login Bypass

-=--------------------ADVISORY-------------------=- phpTrafficA =1.4.3 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: phpTrafficA -=+ Version: =1.4.3 -=+ Vendor's URL: http://soft.zoneo.net/phpTrafficA/index.php -=+ Platform: WindowsLinuxUni...

phptraffica143-bypass.txt

-=--------------------ADVISORY-------------------=- phpTrafficA =1.4.3 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: phpTrafficA -=+ Version: =1.4.3 -=+ Vendor's URL: http://soft.zoneo.net/phpTrafficA/index.php -=+ Platform:...

CVE-2007-3425

Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbitrary local files via the lang parameter, a different vector and version than CVE-2007-1076.2...

CVE-2007-3427

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...

CVE-2007-3426

Cross-site scripting XSS vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Sql injection

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...

CVE-2007-3428

Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via the file parameter to 1 plotStatBar.php or 2 plotStatPie.php, different vectors than CVE-2007-1076...

Directory traversal

Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbitrary local files via the lang parameter, a different vector and version than CVE-2007-1076.2...

CVE-2006-7209: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the 1 main, 2 daily, 3 weekly, 4 monthly, 5 new trends, 6 individual page, and 7 search engine...

CVE-2006-7209

CVE-2006-7209 describes multiple cross-site scripting (XSS) vulnerabilities in phpTrafficA before version 1.2beta2 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to keywords, affecting the application's pages for main, daily, weekly, mon...