YouTube Clone Script - 'spages.php' Remote Code Execution

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

CVE-2008-0687

Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...

CVE-2008-0687

Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...

CVE-2008-0687

CVE-2008-0687 affects the Youtube Clone Script. Affected component: siteadmin/editor_files/includes/load_message.php. Vulnerability: cross-site scripting (XSS) via the lang[please_wait] parameter, enabling remote attackers to inject arbitrary web script or HTML. Impact stated: partial confidentia...

CVE-2008-0687: Improper Control of Generation of Code

Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...

HispaH YouTube Clone - load_message.php Cross-Site Scripting

HispaH YouTube Clone - loadmessage.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27598/info HispaH Youtube Clone is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

HispaH YouTube Clone - 'load_message.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27598/info HispaH Youtube Clone is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the context of an unsuspecting...

Youtube Clone Xross Site Scripting (load_message.php)

Discovered by Smasher CMS: Youtube Clone Script Site: http://warwolfz.altervista.org WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: ?php echo $lang'pleasewait'; ? Ex:...

youtubeclone-xss.txt

Discovered by Smasher CMS: Youtube Clone Script Site: http://warwolfz.altervista.org WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: Ex:...

youtubed-xss.txt

I discovered it just while waiting for my video to download : http://youtube.com/results?searchquery=test+'test%22%%20style=-moz-binding:url'http://sectroyer.110mb.com/xss.xml%23xss'%20style=background:urljavascript:alertdocument.cookie%20test=test Besides stealing YouTube accounts I don't think ...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

CVE-2007-3773 involves a CSRF flaw in the Email-Template module of a Generic YouTube Clone Script. The vulnerability enables remote attackers to cause administrators to upload files with arbitrary types to templates/emails/. The documents confirm the affected component (Email-Template module) and...

CVE-2007-3773: Improper Control of Generation of Code

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

youtube-bypass2.txt

Youtube.com requires account creation and login before allowing visitors to view videos flagged by users as inappropriate. Sample flagged video: http://www.youtube.com/watch?v=pJg0MYnndnw "This video or group may contain content that is inappropriate for some users, as flagged by YouTube's user...

Youtube Script id参数远程SQL注入漏洞

BUGTRAQ ID: 24734 Youtube Script是用PHP编写的用于播放在线视频的脚本。 Youtube Script在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞控制应用系统或导致敏感信息泄露。 Youtube Script的msg.php脚本中没有正确地验证对id参数的输入，允许远程攻击者通过在提交的数据中插入SQL代码在有漏洞的站点非授权操作数据库。 Devellion Limited Youtube script 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Sql injection

SQL injection vulnerability in msg.php in HispaH YouTube Clone Script youtubeclone allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3518

SQL injection vulnerability in msg.php in HispaH YouTube Clone Script youtubeclone allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3518

SQL injection vulnerability in msg.php in HispaH YouTube Clone Script youtubeclone allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3518

CVE-2007-3518 describes an SQL injection in msg.php of the HispaH YouTube Clone Script (youtubeclone). The vulnerability arises from unsafely handling the id parameter, allowing remote attackers to execute arbitrary SQL commands. This is documented in NVD and CVE records, with publicly referenced...