CVE-2006-4918

In Simple Discussion Board 0.1.0, the vulnerability is a PHP remote file inclusion issue that can allow an attacker to execute arbitrary PHP code. The flaw arises when user-supplied URLs and paths are used by env_dir (for blank.php, admin.php, builddb.php) and script_root parameters, enabling rem...

PHProg 1.0 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/19942/info PHProg is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These issues include a cross-site scripting vulnerability and a local file-include vulnerability. A successful exploit m...

IDevSpot PHPHostBot 1.0 - index.php Remote File Inclusion

IDevSpot PHPHostBot 1.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19084/info PHPHostBot is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote fi...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

VBZoom 1.0/1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/18403/info VBZooM is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2006-2476

CVE-2006-2476 affects Bitrix Site Manager 4.1.x where updater.log is stored in the web document root with insufficient access control, enabling remote attackers to obtain sensitive information. Root cause: improper access restrictions on updater.log. Impact is information disclosure of potentiall...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

vBulletin v3.5.4: HTTP Response Splitting

Здравствуйте, vuln. Уязвимость в параметре url скрипта inlinemod.php при POST-запросе: зарегистрированный пользователь может редактировать http-ответ. ПРИМЕР: POST /vb354/inlinemod.php HTTP/1.0 Cookie: bbpassword=a5c3d9e61bcb8dea99105143c772bcd9; bbuserid=1 Content-Length: 93 Accept: /...

CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2archives.php?b2inc' Remote File Inclusion

source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are...

myBB-SQL.txt

MyBB New SQL Injection D3vil-0x1 Milw0rm ID :- http://www.milw0rm.com/auth.php?id=1320 The Inf.File :- misc.php Linez :- code $buddies = $mybb-user'buddylist'; $namesarray = explode",",$buddies; ifisarray$namesarray whilelist$key, $buddyid = each$namesarray $sql .= "$comma'$buddyid'";...

dotProject 2.0 - '/modules/admin/vw_usr_roles.php?baseDir' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...