Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Wheatblog db != 'resource' touchDatabaseSession; Proof of Concept: www.site.com/includes/session.php?wbclassdir=SHELL 0day.today 2018-04-04...

CVE-2005-3963

SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dcxd parameter in a cookie...

CVE-2005-3963

DotClear contains an SQL injection vulnerability in session.php (pre-1.2.3) exploitable via the dc_xd cookie, allowing remote attackers to execute arbitrary SQL. Impact is information disclosure/modification and potential server compromise as described in the CVE records. The connected documents ...

CVE-2005-2615

Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving autologinid...

CVE-2005-2615

Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving autologinid...

CVE-2005-2615

Technical details about CVE-2005-2615 are not publicly available in the provided documents; no concrete affected versions, impact, or remediation are described. Monitor for updates.

[SA16285] EQdkp session.php Session Handling Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2004-2066

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the 1 linphauserid or 2 linphapassword cookies...

CVE-2005-0661

SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 userid or 2 lastvisit cookie...

CVE-2005-0300

CVE-2005-0300 is a directory traversal vulnerability in JSBoard’s session.php. Affected versions are 2.0.9 and earlier; remote attackers could read arbitrary files by supplying a .. in the table parameter. The connected Nessus entry suggests a fix in JSBoard 2.0.10 (i.e., upgrade to 2.0.10 or lat...

JSBoard < 2.0.10 session.php Arbitrary File Access (deprecated)

Binary data 2549.prm...