W-Agora 4.0 - 'delete_user.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'create_user.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'delete_notes.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'edit_forum.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'mail_users.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'reorder_forums.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'create_forum.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'moderate_notes.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

ClanSphere 2007.4.4 Remote File Disclosure Vulnerability.

-------------------------------------------------------------- ClanSphere 2007.4.4 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://sourceforge.net/projects/clansphere/ author : p4imi0 contact : [email protected] exploit :...

clansphere-disclose.txt

-------------------------------------------------------------- ClanSphere 2007.4.4 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://sourceforge.net/projects/clansphere/ author : p4imi0 contact : [email protected] exploit :...

mds-disclose.txt

-------------------------------------------------------------- Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.milliondollarscript.com author : p4imi0 contact : [email protected] exploit :...

CVE-2007-6647

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-6647

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-6647

CVE-2007-6647 is a SQL injection vulnerability in the web app component w-Agora ≤ 4.2.1, exploitable via the cat parameter in index.php. The connected sources confirm the affected product and vulnerability class but do not provide a patch version or remediation steps within the available document...

CVE-2007-6647

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

w-Agora 'index.php' SQL注入漏洞

BUGTRAQ ID: 27070 CNCAN ID:CNCAN-2008010213 w-Agora是一款基于PHP的WEB应用程序。 w-Agora不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'index.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 W-Agora 4.2.1 目前没有解决方案提供： http://www.w-agora.net/en/index.php...

w-Agora <= 4.2.1 (cat) Remote SQL Injection Vulnerability

No description provided by source. W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Author: R00TATI Contact: [email protected] - http://www.ihteam.net Exploit :...

w-Agora 4.2.1 - cat SQL Injection

w-Agora 4.2.1 - cat SQL Injection W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Exploit :...

w-Agora <= 4.2.1 (cat) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= w-Agora = 4.2.1 cat Remote SQL Injection Vulnerability ========================================================= W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes...