eschew.net phpbannerexchange 2.0 vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in phpBannerExchange prior to 2.0 Update 6 allows remote malicious users to execute arbitrary SQL commands via the (1) login parameter in (a) client/stats.php and (b) admin/stats.php, or the (2) pass parameter in client/stats.php.

Eschew.net Phpbannerexchange 2.0 Update 1 Eschew.net Phpbannerexchange 2.0 Update 2 Eschew.net Phpbannerexchange 2.0 Update 5 Eschew.net Phpbannerexchange 2.0 Eschew.net Phpbannerexchange 2.0 Update 3 Eschew.net Phpbannerexchange 2.0 Update 4

Interpretation conflict in resetpw.php in phpBannerExchange prior to 2.0 Update 6 allows remote malicious users to execute arbitrary SQL commands via an email parameter containing a null (%00) character after a valid e-mail address, which passes the validation check in the eregi ...

Eschew.net Phpbannerexchange 2.0 Update 3 Eschew.net Phpbannerexchange 2.0 Update 4 Eschew.net Phpbannerexchange 2.0 Eschew.net Phpbannerexchange 2.0 Update 1 Eschew.net Phpbannerexchange 2.0 Update 2 Eschew.net Phpbannerexchange 2.0 Update 5

Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and previous versions, and other versions prior to 2.0 Update 5, allows remote malicious users to read arbitrary files via a .. (dot dot) in the email parameter during a "Recover password&qu...

Eschew.net Phpbannerexchange 2.0 Eschew.net Phpbannerexchange 2.0 Update 3 Eschew.net Phpbannerexchange 2.0 Update 4 Eschew.net Phpbannerexchange 2.0 Update 1 Eschew.net Phpbannerexchange 2.0 Update 2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook