Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2006-7025

Disclosure Date: February 23, 2007 (last updated October 04, 2023)
SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter.
0
0
Attacker Value
Unknown

CVE-2007-0499

Disclosure Date: January 25, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the env[inc_path] parameter.
0
0
Attacker Value
Unknown

CVE-2006-2877

Disclosure Date: June 07, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP files via the include_prefix parameter in (1) inc/dbase.php, (2) inc/config.php, (3) inc/common.php, and (4) inc/function.php. NOTE: it has been reported that the inc directory is protected by a .htaccess file, so this issue only applies in certain environments or configurations.
0
0
Attacker Value
Unknown

CVE-2003-1253

Disclosure Date: December 31, 2003 (last updated February 22, 2025)
PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load.php.
0
0