shay6ooon vulnerabilities and exploits

(subscribe to this query)

Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote malicious users to execute arbitrary PHP code via a URL in the (1) level parameter to (a) install_module.php and (b) uninstall_module.php in upload/xax/admin/modules/, (c) upload/xax/admin/pa...

Ossigeno Cms 2.2 Pre1

6 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote malicious users to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php, the (2) theme_c parameter to help/index.php, or the (3) IN...

X7 Group X7 Chat 2.0.5 X7 Group X7 Chat 2.0.4

2 EDB exploits

Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote malicious users to execute arbitrary PHP code via a URL in the _SESSION[PM_INCPHP] parameter to (1) incphp/globals.php or (2) plugins/export/mc_table.php. NOTE: it could be argued...

Pmapper P.mapper 3.2.0 Beta3

2 EDB exploits

Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote malicious users to execute arbitrary PHP code via a URL in the cfgProgDir parameter to (1) admincp/auth/secure.php or (2) admincp/auth/checklogin.php.

Vortex Portal Vortex Portal 1.0.42

1 EDB exploit

PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote malicious users to execute arbitrary PHP code via a URL in the action parameter.

Mebiblio Mebiblio 0.4.5

1 EDB exploit

Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote malicious users to execute arbitrary PHP code via a URL in the (a) php_root_path and sometimes the (b) privilege_root_path parameter to various PHP scripts under (1) admin/includes/, (2) admin/ph...

Iaprcommence Iapr Commence 1.3

1 EDB exploit

Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote malicious users to execute arbitrary PHP code via a URL in the tm_includepath parameter to (1) Classes.inc.php, (2) statistic.inc.php, (3) status.inc.php, (4) status_top_x.inc.php, or (5) libchart-...

Tellmatic Tellmatic 1.0.7

1 EDB exploit

Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote malicious users to inject arbitrary web script or HTML via the error parameter in an error page action.

Ftp Admin 0.1.0

2 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook