China-on-site Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/china-on-site/ Sun, 26 Feb 2023 09:11:41 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png China-on-site Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/china-on-site/ 32 32 CVE-2008-6730 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6730/ Sun, 26 Feb 2023 09:11:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6730/ Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the checkuser parameter (aka username field), or (2) the checkpass parameter (aka password field), to admin/index.php.

The post CVE-2008-6730 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the checkuser parameter (aka username field), or (2) the checkpass parameter (aka password field), to admin/index.php.

The post CVE-2008-6730 appeared first on CVE Vulnerability.

]]> CVE-2008-6731 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6731/ Sun, 26 Feb 2023 09:11:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6731/ Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the renamed file in linkphoto/.

The post CVE-2008-6731 appeared first on CVE Vulnerability.

]]> Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the renamed file in linkphoto/.

The post CVE-2008-6731 appeared first on CVE Vulnerability.

]]> CVE-2008-6749 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6749/ Sun, 26 Feb 2023 09:11:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6749/ Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) checkuser and (2) checkpass parameters.

The post CVE-2008-6749 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) checkuser and (2) checkpass parameters.

The post CVE-2008-6749 appeared first on CVE Vulnerability.

]]> CVE-2008-6750 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6750/ Sun, 26 Feb 2023 09:11:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6750/ Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photo/.

The post CVE-2008-6750 appeared first on CVE Vulnerability.

]]> Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photo/.

The post CVE-2008-6750 appeared first on CVE Vulnerability.

]]>