Battle.net Clan Script for PHP 1.5.1 - SQL Injection

Battle.net Clan Script for PHP 1.5.1 - SQL Injection script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass ...

CVE-2007-1842

Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019...

CVE-2007-1842

CVE-2007-1842 affects JSBoard prior to 2.0.12. It is a directory-traversal in login.php where a .. in the table parameter enables remote attackers to include and execute local files (illustrated by PHP sequences injected into an Apache log). This is a confirmed vulnerability with potential arbitr...

CVE-2007-1842: Undefined Security Weakness

Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019...

JSBoard 2.0.10 (login.php table) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== JSBoard 2.0.10 login.php table Local File Inclusion Vulnerability =================================================================== !/usr/bin/perl jsboard 2.0.10login.ph...

Free File Hosting System 1.1 - login.php?AD_BODY_TEMP Remote File Inclusion

Free File Hosting System 1.1 - login.php?ADBODYTEMP Remote File Inclusion source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow...

Information disclosure

wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...

CVE-2007-1599

wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...

CVE-2007-1599

wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...

CVE-2007-1599

CVE-2007-1599 affects WordPress and is documented across multiple connected sources. The vulnerability enables remote attackers to abuse wp-login.php by manipulating the redirect_to parameter to redirect authenticated users to external sites and potentially disclose sensitive information. The Deb...

CVE-2007-1599

wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...

CVE-2007-1599

wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...

CVE-2007-1599: Undefined Security Weakness

wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...

webcal-rfi.txt

|-------------------------------------------------------------------------------| | | | WebCalendar v0.9.45 13 Dec 2004 login.php Remote File include | | | | Script : WebCalendar | | Version : v0.9.45 13 Dec 2004 | | Authord : Drackanz | | Contact : Drackanz at gmail com | | Vendor :...

WebCalendar 0.9.45 (includedir) Remote File Inclusion Vulnerability

No description provided by source. |-------------------------------------------------------------------------------| | | | WebCalendar v0.9.45 13 Dec 2004 login.php Remote File include | | | | Script : WebCalendar | | Version : v0.9.45 13 Dec 2004 | | Authord : Drackanz | | Contact : Drackanz at...

CVE-2007-1473: Undefined Security Weakness

Cross-site scripting XSS vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the newlang parameter to login.php...

CVE-2007-1483: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in the includedir parameter to 1 login.php, 2 getreminders.php, or 3 getevents.php...

WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include

|-------------------------------------------------------------------------------| | | | WebCalendar v0.9.45 13 Dec 2004 login.php Remote File include | | | | Script : WebCalendar | | Version : v0.9.45 13 Dec 2004 | | Authord : Drackanz | | Contact : Drackanz at gmail com | | Vendor :...

WebCalendar 0.9.45 (includedir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== WebCalendar 0.9.45 includedir Remote File Inclusion Vulnerability ===================================================================...

WebCalendar 0.9.45 - includedir Remote File Inclusion

WebCalendar 0.9.45 - includedir Remote File Inclusion |-------------------------------------------------------------------------------| | | | WebCalendar v0.9.45 13 Dec 2004 login.php Remote File include | | | | Script : WebCalendar | | Version : v0.9.45 13 Dec 2004 | | Authord : Drackanz | |...