Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2008-3763

Disclosure Date: August 21, 2008 (last updated October 04, 2023)
Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register_globals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file.
0
0
Attacker Value
Unknown

CVE-2008-3764

Disclosure Date: August 21, 2008 (last updated October 04, 2023)
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.
0
0
Attacker Value
Unknown

CVE-2008-3762

Disclosure Date: August 21, 2008 (last updated October 04, 2023)
SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php.
0
0
Attacker Value
Unknown

CVE-2006-4051

Disclosure Date: August 10, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter.
0
0