crash_over_ride vulnerabilities and exploits

(subscribe to this query)

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote malicious users to execute arbitrary PHP code via a URL in the qb_path parameter to (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php or (7) history.php, ...

Free Qboard Free Qboard 1.1

7 EDB exploits

PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote malicious users to execute arbitrary PHP code via a URL in the _PX_config[manager_path] parameter to (1) index.php, (2) rss.php, or (3) search.php, a different set of vectors and versions than CVE-2006-2645...

Plume-cms Plume Cms 1.0.4

3 EDB exploits

Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote malicious users to execute arbitrary PHP code via a URL in the admin_template_path parameter to admin/ scripts (1) app_change_email.php, (2) app_change_pwd.php, (3) app_mod_rewrite.php, (4) app_page_c...

Nicecoder Indexu 5.0.1

1 EDB exploit

PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote malicious users to execute arbitrary PHP code via a URL in the path parameter.

Dreamcost Dreamaccount 3.1

1 EDB exploit

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote malicious users to execute arbitrary PHP code via a URL in the base_path parameter.

Nicecoder Indexu 5.0.0 Nicecoder Indexu 5.0.1

1 EDB exploit

Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote malicious users to execute arbitrary PHP code via a URL in the theme_path parameter in (1) index.php, (2) become_editor.php, (3) add.php, (4) bad_link.php, (5) browse.php, (6) ...

Nicecoder Indexu 5.0 Nicecoder Indexu 5.0.1

2 EDB exploits

PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and previous versions, when register_globals is enabled, allows remote malicious users to execute arbitrary PHP code via the root parameter in (1) comment.php, (2) admin/comedit.php, (3) admin/test.php, (4) admin/index.p...

Smartsitecms Smartsitecms

2 EDB exploits

SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote malicious users to execute arbitrary SQL commands via the MainID parameter.

Vbzoom Vbzoom 1.11

2 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook