Chironex Fleckeri

CVE-2006-3689 EXPLOITDB text WRITEUP

Codeworks Gnomedia SubberZ[LITE] - RCE

PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any GET variables are processed.

View Code

CVE-2006-4597 EXPLOITDB text WRITEUP

icblogger < 2.0 - SQL Injection via YID Parameter

SQL injection vulnerability in devam.asp in ICBlogger 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the YID parameter.

View Code

CVE-2006-4284 EXPLOITDB text WORKING POC

LBlog <= 1.05 - SQL Injection via comments.asp id Parameter

SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

View Code

CVE-2006-4300 EXPLOITDB text WORKING POC

SimpleBlog < 2.0 - SQL Injection via comments.asp id Parameter

SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

View Code

CVE-2006-4612 EXPLOITDB text WORKING POC

ZIXForum 1.12 - SQL Injection via ReplyNew.asp RepId Parameter

SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId parameter.

View Code