Searching reamday software vulnerabilities

settings.php in Reamday Enterprises Magic News

Enterprises | settingsphp | Reamday | Magic | Plus | News |

settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, then declares the new password string in the new_passwd and confirm_passwd parameters.


settings.php in Reamday Enterprises Magic Downl

Enterprises | settingsphp | Downloads | Reamday | Magic |

settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.


profile.php in Reamday Enterprises Magic News L

Enterprises | profilephp | Reamday | Magic | Lite | News |

profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.


PHP remote file inclusion vulnerability in scri

scripts/news_pagephp | vulnerability | Enterprises | inclusion | Reamday | remote | Magic | file | News | Pro | PHP |

PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter.


Software vulnerabilities results 1 to 5 of 5     
Page: 1