126 matches found
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to 1 admin/includes/authorpanelheader.php or 2 admin/includes/adminheader.php...
Information disclosure
Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3525
Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3524
Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to 1 admin/includes/authorpanelheader.php or 2 admin/includes/adminheader.php...
CVE-2007-3525
Ripe Website Manager 0.8.9 and earlier suffers an information disclosure vulnerability where an unauthenticated remote attacker can access includes/phpinfo.php, which calls phpinfo and reveals configuration information. Root cause: direct request to a file that executes phpinfo. Impact: disclosur...
CVE-2007-3525
Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3524
CVE-2007-3524 affects Ripe Website Manager ≤ 0.8.9. The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL in the level parameter to either admin/includes/author_panel_header.php or admin/includes/admin_header.php. The issue is ca...
CVE-2007-3524
Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to 1 admin/includes/authorpanelheader.php or 2 admin/includes/adminheader.php...
Ripe Website Manager (CMS) 0.8.9 - Remote File Inclusion
Ripe Website Manager CMS 0.8.9 - Remote File Inclusion Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: Ripe Wepsite Manager Version:: Files: /admin/includes/authorpanelheader.php /admin/includes/adminheader.php - vulncode: Exploit:: http://www.site.com/pat...
Ripe Website Manager (CMS) <= 0.8.9 Remote File Inclusion Vulns
Exploit for unknown platform in category web applications =============================================================== Ripe Website Manager CMS Files: /admin/includes/authorpanelheader.php /admin/includes/adminheader.php - vulncode: Exploit:: http://www.site.com/path to...
Ripe Website Manager (CMS) <= 0.8.9 Remote File Inclusion Vulns
No description provided by source. Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: Ripe Wepsite Manager Version:: = v0.8.9 Type:: Remote File Include Source:: http://sourceforge.net/project/showfiles.php?groupid=194532 Bug:: - Files:...
Ripe Website Manager (CMS) 0.8.9 - Remote File Inclusion
Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: Ripe Wepsite Manager Version:: Files: /admin/includes/authorpanelheader.php /admin/includes/adminheader.php - vulncode: Exploit:: http://www.site.com/path to...
Ripe Website Manager (<= 0.8.4) - SQL Injection Vulnerability and Cross-Site Scripting Exploit
No description provided by source. !-- Ripe Website Manager = 0.8.4 - SQL Injection Vulnerability and Cross-Site Scripting Exploit Vulnerable Variable: ripeformpost Cross-Site Scripting and SQL Injection possible Vulnerable File: contact/index.php Vulnerable: Ripe Website Manager = 0.8.4 Google...
Sql injection
SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ripeformpost parameter...
CVE-2007-2207
SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ripeformpost parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a leading """ in the ripeformpost parameter...
CVE-2007-2206
Cross-site scripting XSS vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a leading """ in the ripeformpost parameter...
CVE-2007-2206
Cross-site scripting XSS vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a leading """ in the ripeformpost parameter...
CVE-2007-2206
CVE-2007-2206 : The vulnerability affects Ripe Website Manager (version 0.8.4 and earlier) and is a cross-site scripting (XSS) in the contact/index.php handler. The issue allows remote attackers to inject arbitrary web script or HTML via a leading "<"
CVE-2007-2207
CVE-2007-2207 involves a SQL injection in the Ripe Website Manager up to version 0.8.4, exploitable via the ripeformpost parameter in contact/index.php. The vulnerability allows remote attackers to manipulate SQL commands; impact details are cited as partial confidentiality/integrity/availability...