CVE-2006-4766

Directory traversal vulnerability in print.php in Stefan Ernst Newsscript aka WM-News 0.5 beta allows remote attackers to read arbitrary files via a .. dot dot in the ide parameter...

CVE-2006-4766

CVE-2006-4766 concerns a directory traversal vulnerability in the print.php script of Stefan Ernst Newsscript (aka WM-News) 0.5 beta. The issue allows remote attackers to read arbitrary files by supplying a .. path segment in the ide parameter, exposing partial confidentiality. The available refe...

CVE-2006-4766

Directory traversal vulnerability in print.php in Stefan Ernst Newsscript aka WM-News 0.5 beta allows remote attackers to read arbitrary files via a .. dot dot in the ide parameter...

Newsscript version 0.5 (print.php) Local File Inclusion Vulnerability

Subject: --- "Newsscript version 0.5 print.php Local File Inclusion Vulnerability " Vulnerable version: --- "Newsscript version 0.5" Vendor URL: --- Emaill - [email protected] --- Website - http://webmaster-journal.com Available in: ---http://www.comscripts.com/scripts/php.wm-news.203.ht...

Newsscript <= 0.5 Remote and Local File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= Newsscript 2 3 27 include$filename; The second flaw is due to an input validation error in the "article.php" script that does not validate the "ide" parameter, which could be...

Web-CMS &lt;&lt;--1.0 &quot;print.php&quot; SQL injection

============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r Breeeeh-BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ============================================= Example:- /cms/print.php?id=SQL...

CVE-2006-2846

Cross-site scripting XSS vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2846

CVE-2006-2846 describes a Cross-site scripting (XSS) vulnerability in the VisionGate Portal System, specifically in Print.PHP. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. The underlying root cause is an XSS flaw in the Print.PHP component; ...

CVE-2006-2846

Cross-site scripting XSS vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2040

Photokorn versions 1.53 and 1.542 are affected by multiple SQL injection vulnerabilities that allow remote attackers to manipulate SQL via parameters in index.php (cat, pic, page), postcard.php (id), and print.php (cat). The NVD entry confirms remote code execution of arbitrary SQL commands with ...

CVE-2006-1918

Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...

CVE-2006-1918

CVE-2006-1918 affects Papoo 2.1.5. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the menuid parameter in index.php or forum.php, and the reporeid_print parameter in print.php. The root cause is improper sanitization of input leading to script/HTML injection. Docum...

CVE-2006-1918

Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...

CVE-2006-1893

Cross-site scripting XSS vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-1893

CVE-2006-1893 describes a cross-site scripting (XSS) vulnerability in the print.php component of ar-blog 5.2, exploitable via the id parameter to inject arbitrary script/HTML. The vulnerability is documented across multiple sources (NVD, CVE List, PRION, etc.), with the impact described as enabli...

saphplessonSQL.txt

Hi Vulnerable: SaphpLesson2.0 http://www.Arabless.com Exploit : http://Example.com/lesson/print.php?lessid=SQL Example : For Name & Passowrd...

Sql injection

SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter...