469 matches found
CVE-2007-4287
CVE-2007-4287: PHP remote file inclusion in FishCart 3.2 RC2 and earlier (fc_functions/fc_example.php) allows remote attackers to execute arbitrary PHP code via a URL supplied in the docroot parameter. Affected: FishCart before 3.2 RC2; root cause is inclusion of an external file path from docroo...
FishCart <= 3.2 RC2 (fc_example.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================== FishCart bug found: "/fishcartv3/fcfunctions/fcexample.php?docroot=shell" 0day.today 2018-03-16...
FishCart 3.2 RC2 - 'fc_example.php' Remote File Inclusion
fishcartv3 fcexample.php Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : fishcartv3 Discovered By : k1n9k0ng Scripts site : http://fishcart.org/fcinstallersnap20070803.zip http://fishcart.org/fishcartsnap2007080...
CVE-2007-3226
Cross-site scripting XSS vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-2851 and CVE-2006-3240...
JVN#63602912 dotProject cross-site scripting vulnerability
This vulnerability is different from JVN97636431. Impact An arbitrary script may be executed on the user's web browser. In particular, if session information from a cookie is leaked, session hijacking could be conducted. Solution Update the Software The developer has released dotProject version 2...
Remote file inclusion
PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...
CVE-2007-2313
CVE-2007-2313 describes a PHP remote file inclusion in the Shotcast 1.0 RC2 module for mxBB, where an attacker can cause arbitrary PHP code execution by supplying a URL in the mx_root_path parameter. The vulnerability is exploitable remotely and affects the affected component as described in the ...
CVE-2007-2313
PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...
CVE-2007-2201
Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...
mxBB Module MX Shotcast 1.0 RC2 - 'getinfo1.php' Remote File Inclusion
!/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx; Vendor:...
Woltlab Burning Board UserGroups.PHP SQL注入漏洞
Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'UserGroups.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Woltlab Burning Board 2.7 Woltlab Burning Board 2.6 Woltlab Burning Board 2.5 Woltlab Burning Board 2.4 Woltlab Burning...
CVE-2006-7115
SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php...
CVE-2006-7120
CVE-2006-7120 is a PHP remote file inclusion in lib/php/phphtmllib-2.5.4; specifically, the vulnerability affects maintain 3.0.0-RC2 via example6.php where a URL supplied to the phphtmllib parameter can lead to code execution. The PT-2007-1398 analysis confirms the affected components: lib/php/ph...
PT-2007-1398 · Php · Lib/Php/Phphtmllib +1
Name of the Vulnerable Software and Affected Versions: lib/php/phphtmllib-2.5.4 maintain version 3.0.0-RC2 Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. This issue might be related to phpHtmlLib. It is noted...
Sql injection
Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2007-0378
Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2007-0379
Cross-site scripting XSS vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...