1292 matches found
Sql injection
SQL injection vulnerability in spipaccesdoc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter...
CVE-2006-0625
Directory traversal vulnerability in SpipRSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALStypeurls parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file...
CVE-2006-0626
SQL injection vulnerability in spipaccesdoc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter...
DEBIAN-CVE-2006-0625
Directory traversal vulnerability in SpipRSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALStypeurls parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file...
CVE-2006-0625
Directory traversal vulnerability in SpipRSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALStypeurls parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file...
CVE-2006-0626
SQL injection vulnerability in spipaccesdoc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter...
Directory traversal
Directory traversal vulnerability in SpipRSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALStypeurls parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file...
CVE-2006-0626
CVE-2006-0626 affects SPIP 1.8.2g and earlier, with a SQL injection in spip_acces_doc.php3 that allows remote attackers to execute arbitrary SQL commands via the file parameter. The flaw arises from improper handling of the file input, enabling unauthorized access to the database. Impact is parti...
CVE-2006-0625
CVE-2006-0625 affects SPIP 1.8.2g and earlier, enabling directory traversal through the GLOBALS[type_urls] parameter to read or include arbitrary files, which could then be used to execute arbitrary code via direct static code injection in spip_acces_doc.php3. The documentation specifies the vuln...
CVE-2006-0625
Directory traversal vulnerability in SpipRSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALStypeurls parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file...
CVE-2006-0626
SQL injection vulnerability in spipaccesdoc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter...
CVE-2006-0625
Directory traversal vulnerability in SpipRSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALStypeurls parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file...
CVE-2006-0626
SQL injection vulnerability in spipaccesdoc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter...
SPIP 1.8.2g - Remote Command Execution
this works regardless of magicquotesgpc settings usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Fighting with a large army under your command is nowise different from fighting with a small one: it is merely a question of instituting signs and signals." errorreporting0;...
SPIP <= 1.8.2g Remote Commands Execution Exploit
Exploit for unknown platform in category web applications ================================================ SPIP this works regardless of magicquotesgpc settings usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Fighting with a large army under your command is nowise differen...
SPIP <= 1.8.2g Remote Commands Execution Exploit
No description provided by source. ?php ---spip182gshellinjxpl.php 17.33 08/02/2006 SPIP = 1.8.2g remote commands execution coded by rgod site: http://retrogod.altervista.org - this works regardless of magicquotesgpc settings usage: launch from Apache, fill in requested fields, then go! Sun-Tzu:...
SPIP 1.8.2 - Spip_RSS.php Remote Command Execution
SPIP 1.8.2 - SpipRSS.php Remote Command Execution source: https://www.securityfocus.com/bid/16556/info SPIP is prone to a remote command-execution vulnerability. This is due to a lack of proper sanitization of user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP...
SPIP 1.8.2 - 'Spip_RSS.php' Remote Command Execution
source: https://www.securityfocus.com/bid/16556/info SPIP is prone to a remote command-execution vulnerability. This is due to a lack of proper sanitization of user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP commands on an affected computer with the...
SPIP 1.8.2g - Remote Command Execution
SPIP 1.8.2g - Remote Command Execution this works regardless of magicquotesgpc settings usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Fighting with a large army under your command is nowise different from fighting with a small one: it is merely a question of instituting...