aiocp aiocp 1.3.007 vulnerabilities and exploits

(subscribe to this query)

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the load_page parameter.

Aiocp Aiocp 1.3.007 Aiocp Aiocp 1.3.003 Aiocp Aiocp 1.3.004 Aiocp Aiocp 1.3.000 Aiocp Aiocp 1.3.001 Aiocp Aiocp 1.3.002 Aiocp Aiocp 1.3.005 Aiocp Aiocp 1.3.006

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) topid, (2) forid, and (3) catid parameters to code/cp_forum_view.php; (4) choosed_...

Aiocp Aiocp 1.3.000 Aiocp Aiocp 1.3.007 Aiocp Aiocp 1.3.003 Aiocp Aiocp 1.3.004 Aiocp Aiocp 1.3.001 Aiocp Aiocp 1.3.002 Aiocp Aiocp 1.3.005 Aiocp Aiocp 1.3.006

5 EDB exploits

All In One Control Panel (AIOCP) 1.3.007 and previous versions allows remote malicious users to obtain the full path of the web server via certain requests to (1) public/code/cp_dpage.php, possibly involving the aiocp_dp[] parameter, (2) public/code/cp_show_ec_products.php, possi...

Aiocp Aiocp 1.3.006 Aiocp Aiocp 1.3.007 Aiocp Aiocp 1.3.002 Aiocp Aiocp 1.3.000 Aiocp Aiocp 1.3.001 Aiocp Aiocp 1.3.003 Aiocp Aiocp 1.3.004 Aiocp Aiocp 1.3.005

3 EDB exploits

Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) choosed_language parameter to (a) cp_dpage.php, (b) cp_news.php, (c) cp_forum_view.php, (d) cp_edit_...

Aiocp Aiocp 1.3.003 Aiocp Aiocp 1.3.004 Aiocp Aiocp 1.3.005 Aiocp Aiocp 1.3.006 Aiocp Aiocp 1.3.001 Aiocp Aiocp 1.3.002 Aiocp Aiocp 1.3.000 Aiocp Aiocp

12 EDB exploits

SQL injection vulnerability in shared/code/cp_functions_downloads.php in Nicola Asuni All In One Control Panel (AIOCP) prior to 1.3.009 allows remote malicious users to execute arbitrary SQL commands via the download_category parameter.

Nicola Asuni All In One Control Panel 1.3.000 Nicola Asuni All In One Control Panel 1.3.001 Nicola Asuni All In One Control Panel 1.3.002 Nicola Asuni All In One Control Panel 1.3.003 Nicola Asuni All In One Control Panel 1.3.004 Nicola Asuni All In One Control Panel 1.3.005 Nicola Asuni All In One Control Panel 1.3.006 Nicola Asuni All In One Control Panel 1.3.007 Nicola Asuni All In One Control Panel 1.3.008

Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009 and previous versions allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably a different vulnerability than CVE-2006-5830.

Nicola Asuni All In One Control Panel 1.3.000 Nicola Asuni All In One Control Panel 1.3.007 Nicola Asuni All In One Control Panel 1.3.008 Nicola Asuni All In One Control Panel 1.3.003 Nicola Asuni All In One Control Panel 1.3.004 Nicola Asuni All In One Control Panel 1.3.005 Nicola Asuni All In One Control Panel 1.3.006 Nicola Asuni All In One Control Panel 1.3.001 Nicola Asuni All In One Control Panel 1.3.002 Nicola Asuni All In One Control Panel

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook