8 matches found
EUVD-2009-2385
Malware in sbrugna...
BOOKSolved 1.2.2 - Remote File Disclosure
No description provided by source. ...BOOKSolved 1.2.2 l Remote File Disclosure Vulnerability ...Discovered by bd0rk ...Contact: bd0rkathackermail.com or follow me on twitter ...Greetz: inj3ct0r-Team, x0r32, Perle, Siber King ...Tested on: Ubuntu-Linux ...MEZ-Time: 08:17 ...Vendor:...
CVE-2009-2389
Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 jahr or 2 idneu parameter in an archive action, or 3 the newsid parameter...
CVE-2009-2389
Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 jahr or 2 idneu parameter in an archive action, or 3 the newsid parameter...
CVE-2009-2389
CVE-2009-2389 affects USOLVED NEWSolved 1.1.6: the vulnerability is in newsscript.php when magic_quotes_gpc is disabled. An attacker can trigger SQL injection via the archive action using one of three parameters (jahr, idneu, or newsid), enabling remote execution of arbitrary SQL commands. The ex...
CVE-2006-4059
Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 newsscriptlyt.php, 2 newsticker/newsscriptget.php, 3 inc/output/newstheme1.php, 4...
CVE-2006-4059
CVE-2006-4059 affects USOLVED NEWSolved Lite 1.9.2 and possibly earlier. The vulnerability is multiple PHP remote file inclusion flaws that allow an attacker to supply a URL via the abs_path parameter to one of five scripts (newsscript_lyt.php, newsticker/newsscript_get.php, inc/output/news_theme...
CVE-2006-4059
Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 newsscriptlyt.php, 2 newsticker/newsscriptget.php, 3 inc/output/newstheme1.php, 4...