2396 matches found
funkyasp10.txt
vendor site:http://www.funkyasp.co.uk/ product:FunkyASP Glossary v1.0 bug:injection sql risk:medium injection sql : http://www.demo.funkyasp.co.uk/demo/glossary/glossary.asp?alpha='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...
A+ Store E-Commerce[ injection sql & xss (post) ]
vendor site:http://www.webinhabit.com/ product:A+ Store E-Commerce bug:injection sql & xss post risk:medium injection sql get : http://site.com/browse.asp?ParentID='sql xss post : in /accountlogin.asp: username =...
carsite.txt
Car Site Manager injection sql & xss get vendor site:http://www.mginternet.com/ product:Car Site Manager bug:injection sql risk:medium injection sql : http://site.com/csm/asp/detail.asp?l=&p='sql http://site.com/csm/asp/listings.asp?l='sql http://site.com/csm/asp/listings.asp?s=search&typ='sql...
Portix-PHP [login bypass & xss (post)]
product:Portix-PHP vendor site :http://portix2.be risk : medium log with : username: 'or''=' passwd : 'or''=' xss post on the forum , vulnerable fields : titre auteur laurent gaffiй & benjamin mossй http://s-a-p.ca/ contact: [email protected]...
Speedwiki 2.0 Arbitrary File Upload Vulnerability
product :Speedwiki 2.0 vendor site: http://speedywiki.sourceforge.net/ risk:critical a user logged in , can upload a PHP script on the server , by the upload script , there's actually no upload filter on this cms path : /speedywiki/index.php?upload=1 xss get :...
speedwiki20.txt
product :Speedwiki 2.0 vendor site: http://speedywiki.sourceforge.net/ risk:critical a user logged in , can upload a PHP script on the server , by the upload script , there's actually no upload filter on this cms path : /speedywiki/index.php?upload=1 xss get :...
CVE-2006-5788: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in 1 index.php and 2 admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to execute arbitrary PHP code via a URL in the p parameter...
CVE-2006-5667
Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...
EUVD-2006-5652
Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...
CVE-2006-5667
Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...
CVE-2006-5667
CVE-2006-5667 affects P-Book up to version 1.17. The vulnerability is described as multiple PHP remote file inclusion flaws allowing an attacker to execute arbitrary PHP code by supplying a URL in the pb_lang parameter to admin.php and pbook.php. The connected records consistently reference this ...
CVE-2006-5667: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...
P-Book <= 1.17 (pb_lang) Remote File Inclusion Vulnerabilities
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...
P-Book <= 1.17 (pb_lang) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== P-Book = 1.17 pblang Remote File Inclusion Vulnerabilities ============================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / ...
P-Book 1.17 - pb_lang Remote File Inclusion
P-Book 1.17 - pblang Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...
[ECHO_ADV_56$2006] P-Book <= 1.17 (pb_lang) Remote File Inclusion
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion ------------------------------------------------------------------------------ Author : Ahmad...
P-Book 1.17 - 'pb_lang' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...
CVE-2006-5524: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in phplist 2.10.2 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: This issue might overlap CVE-2006-5321...
CVE-2006-5434
PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pnlang parameter...
CVE-2006-5434
CVE-2006-5434 is a PHP remote file inclusion vulnerability in P-News versions 1.16 and 1.17. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the pn_lang parameter, enabling arbitrary code execution. The NVD entry lists a high impact (base score 7.5; Confidenti...