EDB-1663

funktional

Simplog 0.9.2 - 's' Remote Command Execution

Exploit ansehen Quelle exploit_dbverifiziertTyp webappsAutor rgodveröffentlicht 2006-04-11Katalog exploit_db
01

ausgenutzte CVEs (7)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2006-2029USmedium6.4Exploit
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter in (a) previe…
CVE-2006-1776UShigh7.5Exploit
PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the s param…
CVE-2006-1777UShigh7.5Exploit
Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitrary local files via directory t…
CVE-2006-1778UShigh7.5Exploit
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) ind…
CVE-2006-1779USmedium6.8Exploit
Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag param…
CVE-2006-0146UShigh7.5Exploit
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MA…
CVE-2006-0147UShigh7.5Exploit
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4)…
scry

Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan