phpwebsite phpwebsite 0.9.3.1 vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite prior to 0.9.3-2 allows remote malicious users to execute arbitrary SQL queries, as demonstrated using the ANN_id parameter to the announce module.

Phpwebsite Phpwebsite 0.9.3 Phpwebsite Phpwebsite 0.9.3.1 Phpwebsite Phpwebsite 0.9.2 Phpwebsite Phpwebsite 0.9.2.1 Phpwebsite Phpwebsite 0.9.0 Phpwebsite Phpwebsite 0.9.1

CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote malicious users to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.

Phpwebsite Phpwebsite 0.9.3 Phpwebsite Phpwebsite 0.9.3.1 Phpwebsite Phpwebsite 0.9.3.2 Phpwebsite Phpwebsite 0.9.3.3 Phpwebsite Phpwebsite 0.9.3.4 Phpwebsite Phpwebsite 0.7.3 Phpwebsite Phpwebsite 0.8.2 Phpwebsite Phpwebsite 0.8.3

index.php in phpWebSite 0.10.0 and previous versions allows remote malicious users to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message.

Phpwebsite Phpwebsite 0.9.1 Phpwebsite Phpwebsite 0.9.2 Phpwebsite Phpwebsite 0.9.3.1 Phpwebsite Phpwebsite 0.9.3.4 Phpwebsite Phpwebsite 0.9.3.3 Phpwebsite Phpwebsite 0.9.2.1 Phpwebsite Phpwebsite 0.10.0 Phpwebsite Phpwebsite 0.9.3.2 Phpwebsite Phpwebsite 0.9.3 Phpwebsite Phpwebsite 0.9.0

The Announce module in phpWebSite 0.10.0 and previous versions allows remote malicious users to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension.

Phpwebsite Phpwebsite 0.10.0 Phpwebsite Phpwebsite 0.9.0 Phpwebsite Phpwebsite 0.9.3.3 Phpwebsite Phpwebsite 0.9.3.4 Phpwebsite Phpwebsite 0.9.2.1 Phpwebsite Phpwebsite 0.9.3 Phpwebsite Phpwebsite 0.9.3.1 Phpwebsite Phpwebsite 0.9.3.2 Phpwebsite Phpwebsite 0.9.1 Phpwebsite Phpwebsite 0.9.2

SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and previous versions allows remote malicious users to execute arbitrary SQL commands via the topic parameter.

Phpwebsite Phpwebsite 0.10.1 Phpwebsite Phpwebsite 0.10.2 Phpwebsite Phpwebsite 0.7.3 Phpwebsite Phpwebsite 0.9.3.4 Phpwebsite Phpwebsite 0.8.2 Phpwebsite Phpwebsite 0.8.3 Phpwebsite Phpwebsite 0.9.3 Phpwebsite Phpwebsite 0.9.3.1 Phpwebsite Phpwebsite 0.10 Phpwebsite Phpwebsite 0.9.3.2 Phpwebsite Phpwebsite 0.9.3.3

1 EDB exploit

SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the module parameter. NOTE: the provenance of this information is unknown; the details are obtained...

Phpwebsite Phpwebsite 0.10 Phpwebsite Phpwebsite 0.7.3 Phpwebsite Phpwebsite 0.8.3 Phpwebsite Phpwebsite 0.9.1 Phpwebsite Phpwebsite Phpwebsite Phpwebsite 0.9.3 Phpwebsite Phpwebsite 0.9.3.1 Phpwebsite Phpwebsite 0.9.3.2 Phpwebsite Phpwebsite 0.9.3.3 Phpwebsite Phpwebsite 0.8.2 Phpwebsite Phpwebsite 0.9.0 Phpwebsite Phpwebsite 0.9.2 Phpwebsite Phpwebsite 0.9.3.4

1 EDB exploit

Cross-site scripting (XSS) vulnerability in phpWebSite prior to 1.0.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Phpwebsite Phpwebsite 0.10.1 Phpwebsite Phpwebsite 0.10.0 Phpwebsite Phpwebsite 0.10 Phpwebsite Phpwebsite Phpwebsite Phpwebsite 0.9.2 Phpwebsite Phpwebsite 0.9.2.1 Phpwebsite Phpwebsite 0.9.1 Phpwebsite Phpwebsite 0.9.0 Phpwebsite Phpwebsite 0.9.3.2 Phpwebsite Phpwebsite 0.9.3 Phpwebsite Phpwebsite 0.8.2 Phpwebsite Phpwebsite 0.10.2 Phpwebsite Phpwebsite 0.9.3.3 Phpwebsite Phpwebsite 0.9.3.1 Phpwebsite Phpwebsite 0.8.3 Phpwebsite Phpwebsite 0.7.3

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook