pblang pblang 4.65 vulnerabilities and exploits

(subscribe to this query)

NA

PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the temppath parameter.

Pblang Pblang 4.66 Pblang Pblang Pblang Pblang 4.0 Pblang Pblang 4.56 4.5 Rc2 Pblang Pblang 4.6 Pblang Pblang 4.63 Pblang Pblang 4.65

1 EDB exploit

NA

Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote malicious users to read arbitrary files via ".." sequences and "%00" (trailing null byte) in the u parameter.

Pblang Pblang 4.65

2 EDB exploits

NA

Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote malicious users to inject arbitrary web script or PHP via the location field.

Pblang Pblang 4.65

NA

setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote malicious users to obtain sensitive information via a %00 (a null byte) in the u parameter, which reveals the path in an error message.

Pblang Pblang 4.65

NA

Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote malicious users to inject arbitrary web script or HTML via (1) the search string to search.php, (2) the subject of a PM, which is processed by pm.php, or (3) the body of a PM, which is processed by pm...

Pblang Pblang 4.65

NA

Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote malicious users to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login.

Pblang Pblang 4.65

NA

PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the dbpath parameter, a different vector than CVE-2006-5062. NOTE: this issue has been disputed by a reliable t...

Pblang Pblang

NA

Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote malicious users to inject arbitrary web script or HTML via multiple fields in (1) UCP.php and (2) SendPm.php.

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook