10 matches found
EUVD-2009-0705
Malware in sbrugna...
EUVD-2008-0752
Malware in sbrugna...
PowerScripts PowerNews 2.5.6 'subpage' Parameter Multiple Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27688/info PowerScripts PowerNews is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an attacker to access potentially...
Sql injection
SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2009-0705
SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-0742
Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. dot dot in the 1 subpage parameter in a categories.inc.php, b news.inc.php, c other.inc.php, d permissions.inc.php, e templates.inc.php, and f...
Directory traversal
Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. dot dot in the 1 subpage parameter in a categories.inc.php, b news.inc.php, c other.inc.php, d permissions.inc.php, e templates.inc.php, and f...
CVE-2008-0742
CVE-2008-0742 affects PowerScripts PowerNews 2.5.6 with multiple directory traversal flaws allowing an attacker to read and include arbitrary files via .. in pnadmin/ (subpage in categories.inc.php, news.inc.php, other.inc.php, permissions.inc.php, templates.inc.php, users.inc.php) and via the pa...
CVE-2008-0742
Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. dot dot in the 1 subpage parameter in a categories.inc.php, b news.inc.php, c other.inc.php, d permissions.inc.php, e templates.inc.php, and f...
PowerScripts PowerNews 2.5.6 - 'subpage' Parameter Multiple Local File Include Vulnerabilities
PowerScripts PowerNews 2.5.6 'subpage' Parameter Multiple Local File Include Vulnerabilities. CVE-2008-7223. Webapps exploit for php platform source: http://www.securityfocus.com/bid/27688/info PowerScripts PowerNews is prone to multiple local file-include vulnerabilities because it fails to...