2532gigs Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/2532gigs/ Sun, 26 Feb 2023 09:11:46 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png 2532gigs Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/2532gigs/ 32 32 CVE-2008-6901 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6901/ Sun, 26 Feb 2023 09:11:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6901/ Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) settings.php, (2) deleteuser.php, (3) mini_calendar.php, (4) manage_venues.php, and (5) manage_gigs.php, a different vector than CVE-2007-4585.

The post CVE-2008-6901 appeared first on CVE Vulnerability.

]]> Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) settings.php, (2) deleteuser.php, (3) mini_calendar.php, (4) manage_venues.php, and (5) manage_gigs.php, a different vector than CVE-2007-4585.

The post CVE-2008-6901 appeared first on CVE Vulnerability.

]]> CVE-2008-6902 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6902/ Sun, 26 Feb 2023 09:11:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6902/ Unrestricted file upload vulnerability in upload_flyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in flyers/.

The post CVE-2008-6902 appeared first on CVE Vulnerability.

]]> Unrestricted file upload vulnerability in upload_flyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in flyers/.

The post CVE-2008-6902 appeared first on CVE Vulnerability.

]]> CVE-2008-6907 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6907/ Sun, 26 Feb 2023 09:11:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6907/ Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, as accessible from a form generated by index.php.

The post CVE-2008-6907 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, as accessible from a form generated by index.php.

The post CVE-2008-6907 appeared first on CVE Vulnerability.

]]>