EUVD-2011-3728

Malware in sbrugna...

EUVD-2006-0083

Malware in sbrugna...

EUVD-2005-2398

Malware in sbrugna...

PhpBook mail Parameter PHP Code Execution - Ver2 (CVE-2006-0075)

A code execution vulnerability has been reported in GNU phpBook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

NETonE PHPBook 1.4.6 Guestbook.PHP Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14390/info NETonE PHPBook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input to the 'admin' parameter of the 'guestbook.php' script. A successful exploi...

PHPBook 1.x Mail Field PHP Code Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16106/info phpBook is prone to a vulnerability that may let remote attackers inject arbitrary PHP code into the application. This code may then be executed by visiting pages that include the injected code. E-mail field:...

CVE-2011-3771

phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/updatesmilies1.50-1.60.php and certain other files...

CVE-2011-3771

phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/updatesmilies1.50-1.60.php and certain other files...

CVE-2011-3771

The CVE affects phpBook 2.1.0 and concerns an information-disclosure flaw where a direct request to certain .php files causes an error message that reveals the installation path (e.g., doc/update_smilies_1.50-1.60.php). The root cause is an improper error message disclosure that exposes internal ...

CVE-2011-3771: Exposure of Sensitive Information to an Unauthorized Actor

phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/updatesmilies1.50-1.60.php and certain other files...

PT-2011-4661

Name of the Vulnerable Software and Affected Versions phpBook version 2.1.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, requesting files suc...

CVE-2006-0075

Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field mail variable in a new message, which is written to a PHP file...

CVE-2006-0075

CVE-2006-0075 affects phpBook 1.3.2 and earlier. The flaw is a direct static code injection via the e-mail field (mail variable) in a new message, allowing remote attackers to write to a PHP file and execute arbitrary PHP code on the affected system. The NVD entry confirms a high base score (7.5)...

CVE-2006-0075

Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field mail variable in a new message, which is written to a PHP file...

[eVuln] phpBook PHP Code Execution

New eVuln Advisory: phpBook PHP Code Execution --------------------Summary---------------- Software: phpBook http://sourceforge.net/projects/phpbook/ Versions: 1.3.2 and earlier Critical Level: Dangerous Type: PHP Code Execution Class: Remote Status: Unpatched Exploit: Available Solution: Not...

CVE-2006-0075: Undefined Security Weakness

Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field mail variable in a new message, which is written to a PHP file...

EV0006.txt

New eVuln Advisory: phpBook PHP Code Execution --------------------Summary---------------- Software: phpBook http://sourceforge.net/projects/phpbook/ Versions: 1.3.2 and earlier Critical Level: Dangerous Type: PHP Code Execution Class: Remote Status: Unpatched Exploit: Available Solution: Not...

[SA18268] phpBook "email" PHP Code Injection Vulnerability

TITLE: phpBook "email" PHP Code Injection Vulnerability SECUNIA ADVISORY ID: SA18268 VERIFY ADVISORY: http://secunia.com/advisories/18268/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: phpBook 1.x http://secunia.com/product/6719/ DESCRIPTION: Aliaksandr Hartsuyeu ha...

PHPBook 1.x - Mail Field PHP Code Injection

PHPBook 1.x - Mail Field PHP Code Injection source: https://www.securityfocus.com/bid/16106/info phpBook is prone to a vulnerability that may let remote attackers inject arbitrary PHP code into the application. This code may then be executed by visiting pages that include the injected code. E-mai...

PHPBook 1.x - Mail Field PHP Code Injection

source: https://www.securityfocus.com/bid/16106/info phpBook is prone to a vulnerability that may let remote attackers inject arbitrary PHP code into the application. This code may then be executed by visiting pages that include the injected code. E-mail field: [email protected]...