978 matches found
[InterN0T] LightNEasy 2.2.2 - HTML Injection Vulnerability
LightNEasy - HTML Injection Vulnerability Version Affected: 2.2.2 15th January 2009 newest Info: LightNEasy, a simple and light Content Management System and Website Builder Credits: InterN0T External Links: http://lightneasy.org/ -:: The Advisory ::- Vulnerable Input Fields: 1. Comment...
CVE-2007-1809
Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder CWB PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter to 1 clsheadlineprod.php, 2 clslistorders.php, or 3 clsviewpastorders.php in include/, different vectors than...
CVE-2007-1809
Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder CWB PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter to 1 clsheadlineprod.php, 2 clslistorders.php, or 3 clsviewpastorders.php in include/, different vectors than...
CVE-2007-1513
PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder CWB PRO 1.9.8, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder CWB PRO 1.9.8, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter...
CVE-2007-1513
CVE-2007-1513 describes a PHP remote file inclusion in GraFX Company WebSite Builder (CWB) PRO 1.9.8. When register_globals is enabled, an attacker can supply a URL in INCLUDE_PATH to comanda.php to execute arbitrary PHP code. The available documents do not specify a fixed patch/version or mitiga...
CVE-2007-1513
PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder CWB PRO 1.9.8, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter...
Echo Security Advisory 2007.76
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...
[ECHO_ADV_76$2007] Company WebSite Builder PRO (INCLUDE_PATH) Remote File Inclusion Vulnerability
ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability --------------------------------------------- ---------------------------------------------- Autho...
Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability
No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion...
Company WebSite Builder PRO 1.9.8 - 'INCLUDE_PATH' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...
Company WebSite Builder PRO 1.9.8 - INCLUDE_PATH Remote File Inclusion
Company WebSite Builder PRO 1.9.8 - INCLUDEPATH Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder...
[Full-disclosure] HYSA-2006-007 phpmyfamily 1.4.1 CRLF injection & XSS
------------------------------------------------------ HYSA-2006-007 h4cky0u.org Advisory 016 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== phpmyfamily v1.4.1 CRLF injection & XSS SEVERITY: ========= Medium SOFTWARE: ========= phpmyfamily v1.4.1...
CVE-2005-2135
SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder QuickWeb 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 T1 or 2 T2 parameters...
CVE-2005-2135
SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder QuickWeb 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 T1 or 2 T2 parameters...
CVE-2005-2135
CVE-2005-2135 describes an SQL injection in verify.asp of EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0. The vulnerability allows remote attackers to inject arbitrary SQL via the (1) T1 or (2) T2 parameters, enabling potential data exposure or modification. The connected documents provide th...
Dynamic Biz Website Builder (QuickWeb) 1.0 - 'login.asp' SQL Injection
source: https://www.securityfocus.com/bid/14083/info Dynamic Biz Website Builder QuickWeb is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities i...
Dynamic Biz Website Builder (QuickWeb) 1.0 - login.asp SQL Injection
Dynamic Biz Website Builder QuickWeb 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/14083/info Dynamic Biz Website Builder QuickWeb is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or...