CVE-2002-2277

SQL injection vulnerability in modsearch/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the 1 $rech, 2 $BDTabdocs, 3 $BDTabfile, 4 $BDTabliens, 5 $BDTabfaq, or 6 $chemin variables...

CVE-2002-2278: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modsearch/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the 1 $AppTheme, 2 $RubSearch, 3 $RubNews, 4 $RubFile, 5 $RubLiens, or 6 $RubFaq variables...

CVE-2002-2277: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modsearch/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the 1 $rech, 2 $BDTabdocs, 3 $BDTabfile, 4 $BDTabliens, 5 $BDTabfaq, or 6 $chemin variables...

Sql injection

SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

CVE-2007-1641

SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

CVE-2007-1641

SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

CVE-2007-1641

CVE-2007-1641 describes a SQL injection vulnerability in PortailPHP 2.0, exposed through the idnews parameter in index.php. The vulnerability allows remote attackers to potentially execute arbitrary SQL commands, as indicated by the NVD entry. The connected documents corroborate the affected comp...

CVE-2007-1641: Undefined Security Weakness

SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

PortailPhp 2.0 (idnews) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================== PortailPhp 2.0 idnews Remote SQL Injection Exploit ==================================================== use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote...

PortailPhp 2.0 - 'idnews' SQL Injection

use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = ; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Plz Select User ID:" ; %turk = "site" =...

PortailPhp 2.0 (idnews) Remote SQL Injection Exploit

No description provided by source. use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = stdin; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Pl...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbitrary PHP code via a URL in the chemin parameter to 1 modnews/index.php, 2 modnews/goodies.php, or 3 modsearch/index.php. NOTE: The provenance of this information is unknown; the...

Directory traversal

Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary files via a .. dot dot in the chemin parameter to 1 modnews/index.php or 2 modnews/goodies.php. NOTE: The provenance of this information is unknown; the details are obtained solely...

CVE-2007-0820

Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbitrary PHP code via a URL in the chemin parameter to 1 modnews/index.php, 2 modnews/goodies.php, or 3 modsearch/index.php. NOTE: The provenance of this information is unknown; the...

CVE-2007-0821

Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary files via a .. dot dot in the chemin parameter to 1 modnews/index.php or 2 modnews/goodies.php. NOTE: The provenance of this information is unknown; the details are obtained solely...

CVE-2007-0821

Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary files via a .. dot dot in the chemin parameter to 1 modnews/index.php or 2 modnews/goodies.php. NOTE: The provenance of this information is unknown; the details are obtained solely...

CVE-2007-0821

CVE-2007-0821 describes multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2. An attacker can read arbitrary files by injecting a .. sequence into the chemin parameter of two PHP scripts: mod_news/index.php and mod_news/goodies.php. The underlying issue is improper validatio...

CVE-2007-0820

CVE-2007-0820: Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 permit remote code execution via a URL in the chemin parameter to mod_news/index.php, mod_news/goodies.php, or mod_search/index.php. Root cause: inclusion of remote files enabled through user-controlla...

CVE-2007-0821: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary files via a .. dot dot in the chemin parameter to 1 modnews/index.php or 2 modnews/goodies.php. NOTE: The provenance of this information is unknown; the details are obtained solely...

CVE-2007-0820: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbitrary PHP code via a URL in the chemin parameter to 1 modnews/index.php, 2 modnews/goodies.php, or 3 modsearch/index.php. NOTE: The provenance of this information is unknown; the...