OSVDB: Open Sourced Vulnerability Database

Creditee: kurd-team

Known Contact Information:

(as of 2011-04-10)

Known Affiliations:

kurd-team (as of 2011-04-10)

Disclosed Vulnerabilities (11):

Disc. Date	OSVDB ID	Title
2011-09-28	76731	Digital College includes/tiny_mce/plugins/imagemanager/config.php basepath Parameter Remote File Inclusion
2011-09-28	76732	Digital College includes/tiny_mce/plugins/filemanager/classes/FileManager/FileSystems/ZipFileImpl.php basepath Parameter Remote File Inclusion
2011-09-28	76733	Digital College includes/tiny_mce/plugins/filemanager/classes/FileManager/FileManagerPlugin.php basepath Parameter Remote File Inclusion
2011-09-28	76734	Digital College includes/tiny_mce/plugins/filemanager/classes/FileSystems/RootFileImpl.php basepath Parameter Remote File Inclusion
2011-09-28	76735	Digital College includes/tiny_mce/plugins/imagemanager/classes/ImageManager/ImageManagerPlugin.php basepath Parameter Remote File Inclusion
2011-04-11	71691	Etki Video PRO izle.asp id Parameter SQL Injection
2011-04-11	71692	Etki Video PRO kategori.asp cat Parameter SQL Injection
2011-04-10	71694	PHP-Jokesite new_jokes.php cat_id Parameter SQL Injection
2011-04-10	71695	PHP-Jokesite top_ten_jokes.php cat_id Parameter SQL Injection
2011-04-10	71696	PHP-Jokesite top_emailed_jokes.php cat_id Parameter SQL Injection
2011-04-10	71697	PHP-Jokesite creat_postcard.php cat_id Parameter SQL Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.