bl0od3r vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in news.php in Fantastic News 2.1.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Fantastic News Fantastic News

1 EDB exploit

SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote malicious users to execute arbitrary SQL commands via the id parameter.

The Web Drivers Simple Forum

1 EDB exploit

SQL injection vulnerability in view.php in XLAtunes 0.1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the album parameter in view mode. NOTE: some of these details are obtained from third party information.

Scriptdungeon Xlatunes

1 EDB exploit

admin/index.php in IPrimal Forums as of 20061105 allows remote malicious users to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chk_admin.php.

Iprimal Iprimal Forums

1 EDB exploit

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote malicious users to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name parameter.

Fersch Formbankserver 1.9

1 EDB exploit

Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and previous versions allows remote malicious users to include arbitrary local files via a .. (dot dot) in the settings[skin] parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file...

Zomplog Zomplog 3.7.6

1 EDB exploit

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows remote malicious users to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provena...

Fersch Formbankserver 1.9

1 EDB exploit

PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows remote malicious users to execute arbitrary PHP code via a URL in the p parameter.

Iprimal Iprimal Forums

1 EDB exploit

Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote malicious users to read arbitrary files via directory traversal sequences in the Name parameter. NOTE: The provenance of this information is unknown; the details are obtained sole...

Fersch Formbankserver 1.9

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook