GC Auction Platinum (cate_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ GC Auction Platinum cateid Remote SQL Injection Vulnerability ================================================================ || | | GC Auction Platinum cateid Remote SQL...

Greatclone GC Auction Platinum - category.php SQL Injection

Greatclone GC Auction Platinum - category.php SQL Injection source: https://www.securityfocus.com/bid/30389/info GC Auction Platinum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

GC Auction Platinum - 'cate_id' SQL Injection

|| | | GC Auction Platinum cateid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.greatclone.com/productinfo.php?productsid=73 | |...

CVE-2008-1680

CVE-2008-1680 affects PHP-Nuke Platinum 7.6.b.5, where a direct request to maintenance/index.php allows remote attackers to disclose configuration information, including settings such as magic_quotes_gpc. The issue is categorized as information disclosure with a CVSS v2 base score of 5.0 (Network...

Sql injection

SQL injection vulnerability in includes/dynamictitles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary SQL commands via the p parameter to modules.php for the Forums module...

phpnukeplat-sql.txt

!/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite useravatar userregdate usericq userocc userfrom userinterests...

PHP-Nuke Platinum 7.6.b.5 (dynamic_titles.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite useravatar userregdate usericq...

PHP-Nuke Platinum 7.6.b.5 (dynamic_titles.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== PHP-Nuke Platinum 7.6.b.5 dynamictitles.php SQL Injection Exploit ==================================================================== !/usr/bin/perl Inphex use...

PHP-Nuke Platinum 7.6.b.5 - 'dynamic_titles.php' SQL Injection

!/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite useravatar userregdate usericq userocc userfrom userinterests...

Platinum Favorites.PHP远程文件包含漏洞

Php Nuke Fusion Platinum是一款基于PHP的WEB应用程序。 Php Nuke Fusion Platinum不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'Favorites.PHP'脚本对用户提交的'nukebbrootpath'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以以WEB权限执行任意命令 Php Nuke Fusion Platinum 7.6.b.5 目前没有解决方案提供：...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nukebbrootpath parameter...

CVE-2007-5676

CVE-2007-5676 relates to a PHP remote file inclusion in PHP-Nuke Platinum 7.6.b.5, specifically in modules/Forums/favorites.php. The underlying issue allows an attacker to execute arbitrary PHP code via a URL supplied to the nuke_bb_root_path parameter, enabling remote code execution. The affecte...

CVE-2007-5676

PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nukebbrootpath parameter...

PHP-Nuke platinum 7.6.b.5 - Remote File Inclusion

---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO udplink.net & ascnet.biz :...

CVE-2007-2860

Summary (CVE-2007-2860): BoastMachine 3.0 platinum’s user.php allows privilege escalation for remote authenticated users by tampering the id parameter, as demonstrated by an edit_post action. The NVD entry lists a network attack with low complexity and partial confidentiality/integrity/availabili...

Symantec Device Driver Elevation of Privilege

SUMMARY Symantec was notified of a vulnerability in a device driver which, if successfully exploited, could allow a local attacker to execute arbitrary code with elevated privileges or to crash the system. Risk Impact Medium Remote | No ---|--- Local | Yes Authentication Required | Yes Exploit...

Re: SECURITY.NNOV: Panda Platinum Internet Security privilege escalation / bayesian filter control security vulnerabilities

Panda is realy great and realy fast. The Bug was also reported at 16.07.06 to the beta team. -------------------- 16.07.06 -------------------- Hi there, i think there are some badly set filesystem permissions in your software. FileSecure 7.01.10 C:ProgrammePanda SoftwareAVNT everybody full acces...

CVE-2006-4658

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns...

CVE-2006-4657

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying 1 WebProxy.exe or 2 PAVSRV51.EXE...

CVE-2006-4658

The CVE-2006-4658 issue affects Panda Platinum Internet Security 2006 (10.02.01) and 2007 (11.00.00). The root cause is the use of sequential message numbers in generated URLs that are not filtered when a user replies to a message, which could allow remote attackers to infer mail usage patterns. ...