55 matches found
CVE-2008-5877: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php, 2 formid parameter to pcw/processforms.php, 3 pcwlogin and 4 pcwpass...
CVE-2008-5878: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to include and execute arbitrary files via a .. dot dot in the 1 boxname parameter to...
CVE-2008-5879: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors...
Phpclanwebsite <= 1.23.3 Fix Pack #5 Multiple Remote Vulnerabilities
No description provided by source. Phpclanwebsite = 1.23.3 Fix Pack 5 File Including/SQL/XSS Multiple Remote Vulnerabilities The description: The set vulnerability in CMS Phpclanwebsite versions 1.23.3 Fix Pack 5 and more low was revealed. 1. Multiple File Including Vulnerabilities Vulnerability...
Phpclanwebsite <= 1.23.3 Fix Pack #5 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Phpclanwebsite = 1.23.3 Fix Pack 5 Multiple Remote Vulnerabilities ==================================================================== Phpclanwebsite = 1.23.3 Fix Pack 5...
phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities
phpclanwebsite 1.23.3 fix pack 5 - Multiple Vulnerabilities Phpclanwebsite = 1.23.3 Fix Pack 5 File Including/SQL/XSS Multiple Remote Vulnerabilities The description: The set vulnerability in CMS Phpclanwebsite versions 1.23.3 Fix Pack 5 and more low was revealed. 1. Multiple File Including...
Многочисленные уязвимости в Phpclanwebsite <= 1.23.3 Fix Pack #5
Многочисленные уязвимости в Phpclanwebsite = 1.23.3 Fix Pack 5 Описание: Были обнаружены многочисленные уязвимости в CMS Phpclanwebsite версии 1.23.3 Fix Pack 5 и ниже. 1. Множественные уязвимости типа "Чтение произвольных файлов" File Including Уязвимость существует по причине того, что возможен...
phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities
Phpclanwebsite 1+limit+0+union...
CVE-2006-0445
index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability...
Remote file inclusion
index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability...
CVE-2006-0444
SQL injection vulnerability in index.php in Phpclanwebsite aka PCW 1.23.1 allows remote attackers to execute arbitrary SQL commands via the 1 par parameter in the post function on the forum page and possibly the 2 pollid parameter on the poll page. NOTE: the pollid vector can also allow resultant...
Sql injection
SQL injection vulnerability in index.php in Phpclanwebsite aka PCW 1.23.1 allows remote attackers to execute arbitrary SQL commands via the 1 par parameter in the post function on the forum page and possibly the 2 pollid parameter on the poll page. NOTE: the pollid vector can also allow resultant...
CVE-2006-0445
CVE-2006-0445 affects Phpclanwebsite 1.23.1. Affected component: uploader page handling on index.php. Description shows remote authenticated users can obtain the installation path by supplying an invalid filename (example: “\”), which displays the full path of uploader.php, suggesting a possible ...
CVE-2006-0445
index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability...
CVE-2006-0444
SQL injection vulnerability in index.php in Phpclanwebsite aka PCW 1.23.1 allows remote attackers to execute arbitrary SQL commands via the 1 par parameter in the post function on the forum page and possibly the 2 pollid parameter on the poll page. NOTE: the pollid vector can also allow resultant...
CVE-2006-0444
CVE-2006-0444 describes a SQL injection in Phpclanwebsite (aka PCW) 1.23.1 (and related mentions) where an attacker can inject arbitrary SQL via the (1) par parameter in the forum post function and (2) poll_id parameter on the poll page. The poll_id vector may also enable XSS from an unquoted err...
CVE-2006-0444: Undefined Security Weakness
SQL injection vulnerability in index.php in Phpclanwebsite aka PCW 1.23.1 allows remote attackers to execute arbitrary SQL commands via the 1 par parameter in the post function on the forum page and possibly the 2 pollid parameter on the poll page. NOTE: the pollid vector can also allow resultant...
HYSA-2006-002.txt
------=Part308411212921.1138229099426 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline ------------------------------------------------------ HYSA-2006-002 h4cky0u.org Advisory 011...
[Full-disclosure] HYSA-2006-002 Phpclanwebsite 1.23.1 Multiple Vulnerabilities
------------------------------------------------------ HYSA-2006-002 h4cky0u.org Advisory 011 ------------------------------------------------------ Date - Thu Jan 26 2006 TITLE: ====== Phpclanwebsite 1.23.1 Multiple Vulnerabilities SEVERITY: ========= High SOFTWARE: ========= Phpclanwebsite 1.23...
CVE-2006-0445: Undefined Security Weakness
index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability...