EUVD-2007-3133

Malware in sbrugna...

CVE-2009-2147

The CVE-2009-2147 entry describes a SQL injection in fdown.php of phpWebThings (versions 1.5.2 and earlier) that lets remote attackers execute arbitrary SQL commands via the id parameter. Multiple connected sources (NVD, CVE list, PRION, etc.) corroborate the vulnerability as a SQL-injection flaw...

CVE-2009-2081

Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the module parameter...

phpWebThings 1.5.2 - MD5 Hash Retrieve/File Disclosure

!/usr/bin/perl phpWebThings = 1.5.2 MD5 Hash Retrieve / File Disclosure Remote Exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://phpwebthings.nl ------------------------------ NOTE: 1. it works regardless of php.ini settings 2. wtconfig.php contains mysql log...

phpWebThings 1.5.2 - MD5 Hash RetrieveFile Disclosure

phpWebThings 1.5.2 - MD5 Hash RetrieveFile Disclosure !/usr/bin/perl phpWebThings = 1.5.2 MD5 Hash Retrieve / File Disclosure Remote Exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://phpwebthings.nl ------------------------------ NOTE: 1. it works regardless ...

CVE-2007-3141

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the editorinserttop parameter. NOTE: the editorinsertbottom vector is already covered by CVE-2006-6042...

CVE-2007-3141

CVE-2007-3141 affects phpWebThings 1.5.2: remote code execution via PHP remote file inclusion in core/editor.php through the editor_insert_top parameter. Bottom vector already covered by CVE-2006-6042. The connected docs confirm the vulnerability but do not provide a remediation.

CVE-2006-6042

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the editorinsertbottom parameter...

PHPWebThings 1.5.2 - 'editor.php' Remote File Inclusion

+------------------------------------------------------------------------------------------- + phpWebThings 1.5.2 editor.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: phpWebThings 1.5.2 +...