Searching newsphp software vulnerabilities

nphpd.php in newsPHP 216 and earlier allows rem

nphpdphp | newsPHP |

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter.


nphpd.php in newsPHP 216 and earlier allows rem

nphpdphp | newsPHP |

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.


PHP remote file inclusion vulnerability in Cute

vulnerability | inclusion | CuteNews | remote | file | PHP |

PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to (1) show_archives.php or (2) show_news.php.


Multiple SQL injection vulnerabilities in e107

vulnerabilities | injection | Multiple | e107 | SQL |

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php.


Cross-site scripting (XSS) vulnerability in ind

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. NOTE: this issue might overlap vector 3 in CVE-2006-3358.


Unrestricted file upload vulnerability in the A

Administration | administrators | authenticated | vulnerability | Unrestricted | arbitrary | NewsPHP | instead | execute | upload | allows | remote | video | files | Panel | code | file |

Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files.


Cross-site scripting (XSS) vulnerability in sho

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php.


Directory traversal vulnerability in CuteNews 1

vulnerability | traversal | Directory | CuteNews |

Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges via "../" sequences in the template parameter to (1) show_archives.php and (2) show_news.php.


Multiple SQL injection vulnerabilities in JPort

vulnerabilities | arbitrary | injection | attackers | commands | Multiple | execute | JPortal | remote | allow | via | SQL |

Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id parameter to (2) print.php, (3) comment.php, and (4) news.php.


Multiple SQL injection vulnerabilities in index

vulnerabilities | injection | attackers | arbitrary | indexphp | Multiple | commands | NewsPHP | execute | remote | allow | via | SQL |

Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter.


Multiple SQL injection vulnerabilities in vscri

vulnerabilities | injection | vscripts | Multiple | SQL |

Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) loginvar parameter in (a) admin/admin.php, and the (2) news and (3) nom parameters in (b) news.php.


SQL injection vulnerability in include.php in P

vulnerability | includephp | injection | PHPKIT | SQL |

SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the contentid parameter, possibly involving content/news.php.


Multiple SQL injection vulnerabilities in index

vulnerabilities | injection | indexphp | Multiple | NewsPHP | SQL |

Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) topmenuitem, and (4) cat_id parameters in (a) index.php; and the (5) category parameter in (b) inc/rss_feed.php.


Multiple SQL injection vulnerabilities in FreeH

vulnerabilities | injection | attackers | arbitrary | FreeHost | Multiple | commands | execute | remote | allow | via | SQL |

Multiple SQL injection vulnerabilities in FreeHost allow remote attackers to execute arbitrary SQL commands via (1) readme parameter to FreeHost/misc.php or (2) index parameter to FreeHost/news.php.


Multiple PHP remote file inclusion vulnerabilit

vulnerabilities | inclusion | Multiple | remote | News | ACGV | file | PHP |

Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter in (1) header.php or (2) news.php. NOTE: portions of these details are obtained from third party information.


Global variable overwrite vulnerability in main

vulnerability | maincorephp | PHP-Fusion | overwrite | variable | Global |

Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php.


Multiple PHP remote file inclusion vulnerabilit

vulnerabilities | scriptpath | inclusion | arbitrary | attackers | parameter | Multiple | execute | SH-News | earlier | remote | allow | file | code | PHP | via | URL |

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to (1) report.php, (2) archive.php, (3) comments.php, (4) init.php, or (5) news.php.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the id_news parameter to (1) add_comment.php or (2) show_news.php.


Multiple PHP remote file inclusion vulnerabilit

phpBurningPortal | vulnerabilities | quiz-modul | inclusion | Multiple | remote | file | PHP |

Multiple PHP remote file inclusion vulnerabilities in phpBurningPortal quiz-modul 1.0.1, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the lang_path parameter to (1) quest_delete.php, (2) quest_edit.php, or (3) quest_news.php.


Multiple SQL injection vulnerabilities in Jasmi

vulnerabilities | attackers | arbitrary | injection | Multiple | commands | execute | Jasmine | remote | allow | via | SQL | CMS |

Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the login_username parameter to login.php or (2) the item parameter to news.php.


Software vulnerabilities results 1 to 20 of 23     
Page: 12►