PT-2014-3326

Name of the Vulnerable Software and Affected Versions Aphpkb versions prior to 0.95.8 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the HTTP Referer...

PT-2011-3212

Name of the Vulnerable Software and Affected Versions Aphpkb versions 0.95.3 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the aid parameter in the saa.php file. Recommendations For versions 0.95.3 and earlier, update to a versio...

CVE-2011-1555: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase Aphpkb 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information...

CVE-2008-6513: Improper Control of Generation of Code

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase aphpkb 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php...

andysphpkb-upload.txt

============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...