7229 matches found
CVE-2006-5935
SQL injection vulnerability in index.php in ShopSystems 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the sessid parameter...
CVE-2006-5924
The CVE-2006-5924 entry documents a cross-site scripting (XSS) vulnerability in Efficient IP iPmanager (IPm) 2.3, exploitable through the errmsg parameter of index.php. The underlying issue is an reflected/scriptable input being echoed in the web page, allowing remote attackers to inject arbitrar...
Quick.Cart <= 2.0 (actions_client/gallery.php) Local File Include Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
TOPSTORY BASIC Version 1.0 => Remote File Include Vulnerability
TOPSTORY BASIC Version 1.0 = Remote File Include Vulnerability Script.............. :TOPSTORY Discovered By.... : rUnViRuS Class.............. : Remote Original Advisory : http://sec-area.com file :- index.php bug Code :- include$tst"headerfile";...
New Bug MiniBB Forum <= 2 Remote File Include (index.php)
Title : MiniBB Forum = 2 Remote File Include index.php Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.minibb.net/download.php?file=minibb20 ----- Affected software description : Application : MiniBB For...
wheatblogXSS.txt
vendor site: http://wheatblog.sourceforge.net/ product : Wheatblog bug: multiple xss post & full path disclosure risk : medium xss post : /addcomment.php vulnerable fieds : - Name - WWW - Comment impact: an attacker can steal the cookie from every persons who is watching at the comments. full pat...
CVE-2006-5847
CVE-2006-5847 is a Cross-site scripting (XSS) vulnerability in FreeWebshop 2.2.2 and earlier. The flaw exists in index.php via the cat parameter, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include exploitation details, affected versions beyond ...
CVE-2006-5844
Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the 1 showRevisions and 2 searchText parameters in a index.php, and b a direct request to upload.php without any parameters...
PT-2006-6519 · Speedywiki · Speedywiki
Name of the Vulnerable Software and Affected Versions: Speedywiki version 2.0 Description: The issue allows remote authenticated users to upload and execute arbitrary PHP code. This is achieved by setting the upload parameter to 1 in the index.php file. Recommendations: For Speedywiki version 2.0...
Wheatblog [multiple xss (post) & full path disclosure]
vendor site: http://wheatblog.sourceforge.net/ product : Wheatblog bug: multiple xss post & full path disclosure risk : medium xss post : /addcomment.php vulnerable fieds : - Name - WWW - Comment impact: an attacker can steal the cookie from every persons who is watching at the comments. full pat...
PT-2006-6517 · Speedywiki · Speedywiki
Name of the Vulnerable Software and Affected Versions: Speedywiki version 2.0 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the showRevisions parameter in the "index.php" file. Recommendations: For...
WORK System E-Commerce 3.0.1 - Remote File Inclusion
WORK System E-Commerce 3.0.1 - Remote File Inclusion ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability...
gtcatalog <= 0.9.1 (index.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ gtcatalog www.xp10.com SpeciaL PoweR SecuritY TeaM www.specialpower.org Greetz to : | abushahad | RooT-shilL | hitlerjeddah | BooB11 | FaTaL | | ThE-WoLf-KsA | mohandko |...
gtcatalog <= 0.9.1 (index.php) Remote File Include Vulnerability
============================================================================================= Shopping Catalog RFI ============================================================================================= Info:- Scripts: ShoppingCatalog download :...
iPrimal Forums (admin/index.php) Remote File Include Vulnerability
No description provided by source. iPrimal Forums Remote File Inclusion Download:http://ipigroup.org/downloads/forums.zip Found by Bl0od3r Vulnerable Code: line 126-129 ..... if$GET'p' == '' echo 'Please select an item from the menu above.'; else include$GET'p'.'.php'; ..... Affected File:...
gtcatalog 0.9.1 - 'index.php' Remote File Inclusion
============================================================================================= Shopping Catalog RFI ============================================================================================= Info:- Scripts: ShoppingCatalog download :...
CVE-2006-5787
admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chkadmin.php...
CVE-2006-5770
Multiple cross-site scripting XSS vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via 1 Bloks, 2 Newnews, 3 lBlok, and 4 foooot parameter in a index.php; Newnews, 5 newmsgs, and Bloks parameter in b MobileNews.php; Newnews parameter in c polls.php; 6...
CVE-2006-5759
index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty 1 rns or 2 pag arguments, which reveals the path in an error message...
CVE-2006-5759
index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty 1 rns or 2 pag arguments, which reveals the path in an error message...