mhz91 vulnerabilities and exploits

(subscribe to this query)

NA

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote malicious users to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors.

Domphp Domphp 0.81

1 EDB exploit

NA

Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) post_id, (2) post_category_id, (3) post_year_month, and (4) static_page_id parameters; and unspecified other vectors.

Bill Roberts Bloo

1 EDB exploit

NA

Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote malicious users to execute arbitrary PHP code via a URL in the CarpPath parameter to (1) files/carprss.php and (2) files/amazon-bestsellers.php.

Sitebuilder Sitebuilder Elite 1.2

1 EDB exploit

NA

PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote malicious users to execute arbitrary PHP code via a URL in the pageURL parameter.

Barryvan Compo Barryvan Compo Manager 0.3

1 EDB exploit

NA

Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the lang cookie to (1) comment.php, (2) index.php, and (3) show.php.

Freephpgallery Freephpgallery 0.6

1 EDB exploit

NA

Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote malicious users to execute arbitrary PHP code via a URL in the sys_conf[path][real] parameter to (1) modules\class\Table.php; (2) db_admins.php, (3) db_alert.php, (4) db_double.php, (5) ...

Lookstrike Lan Manager 0.9

1 EDB exploit

NA

Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote malicious users to read arbitrary files via a .. (dot dot) in the fileName parameter.

Idmos Idmos Cms 1.0

1 EDB exploit

NA

PHP Webquest 2.6 allows remote malicious users to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in an error message if a call to /usr/bin/mysqldump fails. NOTE: this might only be an issue in limited environments.

Phpwebquest Phpwebquest 2.6

1 EDB exploit

NA

SQL injection vulnerability in index.php in IPTBB 0.5.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via the id parameter in a viewdir action.

Iptbb Team Iptbb 0.5.4

1 EDB exploit

NA

showCode.php in xml2owl 0.1.1 allows remote malicious users to execute arbitrary commands via shell metacharacters in the path parameter.

Xml2owl Xml2owl 0.1.1

1 EDB exploit

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook