mkportalXSS-M11.txt

xxs in MKPortal M1.1 Rc1 info: file:index.php google======MKPortal M1.1 Rc1 ©2003-2005 Exp: http://www.sitename.com/index.php?ind="alert1; -------------------------------------- By Crackman Thank to all friend in www.lezr.com/vb...

CVE-2006-4601

SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4605

The CVE describes a PHP remote file inclusion vulnerability in Longino Jacome php-Revista 1.1.2, exploitable via the adodb parameter in index.php, allowing remote attackers to execute arbitrary PHP code. The NVD entry records a CVSS v2 base score of 7.5 (HIGH) with network attack vector and low a...

vbzoom.txt

vbzoom ==== index.php info: file:index.php thank to www.lezr.com/vb google ====== powered by vbzoom inurl:index.php?UserID= Exp: http://traget/path/index.php?UserID="alert1; =================================== by Crackman...

AckerTodo 4.0 - index.php Cross-Site Scripting

AckerTodo 4.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19894/info AckerTodo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow an attacker to steal cookie-based...

CVE-2006-4593

Cross-site scripting XSS vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4588

vtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and access administrative modules via a direct request to index.php with a modified module parameter, as demonstrated using the Settings module...

CVE-2006-4593

Cross-site scripting XSS vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4588

vtiger CRM 4.2.4 (and possibly earlier) contains an authentication-bypass vulnerability that lets remote attackers access administrative modules by issuing a direct request to index.php with a modified module parameter, demonstrated via the Settings module. Root cause: improper validation of the ...

CVE-2006-4543

Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...

CVE-2006-4543

CVE-2006-4543 is an XSS vulnerability in HLStats 1.34 (index.php). The issue allows remote attackers to inject arbitrary script or HTML via specific parameters across multiple modes: (1) game in players mode, (2) weapon in weaponinfo mode, (3) st in search mode, (4) action in actioninfo mode, and...

GrapAgenda 0.1 (page) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================= GrapAgenda 0.1 page Remote File Include Vulnerability ======================================================= Kurdish Security Advisory Script : GrapAgenda Site :...

XXS in Powered by vbzoom

vbzoom ==== index.php info: file:index.php thank to www.lezr.com/vb google ====== powered by vbzoom inurl:index.php?UserID= Exp: http://traget/path/index.php?UserID="scriptalert1;/script =================================== by Crackman...

ezportal.txt

:: Ezportal/Ztml v1.0 Multiple vulnerabilities :: ------------------------------------------------ Software : Ezportal/Ztml Website : http://www.ztml.org Bug Discover : Hessam-x / www.hessamx.net I. Multiple Cross Site Scripting Vulnerabilities -------------------------------------------------...

CVE-2006-4501

SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 about, 2 album, 3 id, 4 use, 5 desc, 6 doc, 7 mname, 8 max, and possibly other parameters...

CVE-2006-4501

SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 about, 2 album, 3 id, 4 use, 5 desc, 6 doc, 7 mname, 8 max, and possibly other parameters...

CVE-2006-4500

The CVE-2006-4500 entry concerns a Cross-site Scripting (XSS) flaw in ezPortal/ztml CMS 1.0. The vulnerability arises in index.php, where multiple parameters (including about, lastname, email, password, album, id, table, desc, doc, mname, max, htpl, pheader, and possibly others) can be used to in...

CVE-2006-4457

PHP remote file inclusion vulnerability in index.php in phpECard 2.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4457

The CVE-2006-4457 entry describes a PHP remote file inclusion vulnerability in index.php of phpECard 2.1.4 and earlier. The underlying issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the include_path parameter. Affected software/version: phpECard 2.1.4 and ear...

Ezportal/Ztml v1.0 Multiple vulnerabilities

:: Ezportal/Ztml v1.0 Multiple vulnerabilities :: ------------------------------------------------ Software : Ezportal/Ztml Website : http://www.ztml.org Bug Discover : Hessam-x / www.hessamx.net I. Multiple Cross Site Scripting Vulnerabilities -------------------------------------------------...