442 matches found
NuralStorm Webmail <= 0.98b (process.php) Remote Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
BandSite CMS <= 1.1.1 (root_path) Remote File Include Vulnerabilities
No description provided by source. --------------------------------------------------------------------------- Grayscale BandSite CMS =rootpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Te...
MySimpleNews 1.0 PHP Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5865/info MySimpleNews allows users to enter news articles through a web interface. It will allow PHP code to be injected into URI parameters of the 'users.php' script, which will be stored into a MySimpleNews file...
CampSite <= 2.6.1 (g_documentRoot) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- CampSite - BugReporter = 2.6.1 Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
al3jeb script Remote Login Bypass Exploit
No description provided by source. '/ -.- --------------------oOO------OOo------------------- | al3jeb script Remote Login Bypass Exploit | | works only with magicquotesgpc = off | ------------------------------------------------------ ! Discovered: cr4wl3r cr4wl3r!linuxmail.org ! Date: 19.01.201...
WikkaWiki 1.3.2 Spam Logging PHP Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
deluxebb <= 1.2 - Multiple Vulnerabilities exploit
No description provided by source. ?php / ------------------------------------------------------- DeluxeBB = 1.2 Multiple Remote Vulnerabilities Exploit ------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.deluxebb.com/...
CyberBrau <= 0.9.4 (forum/track.php) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- CyberBrau = 0.9.4 path Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
AROUNDMe <= 0.5.2 (templatePath) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
PHlyMail Lite <= 3.4.4 (folderprops.php) Remote Include Vulnerability (2)
No description provided by source. --------------------------------------------------------------------------- PHlyMail Lite = 3.4.4 Build 3.04.04 PMpathhandler Remote File Include Vulnerability 2 --------------------------------------------------------------------------- Discovered By Kw3RLn...
GeekLog <= 1.4.0sr3 (_CONF[path]) Remote File Include Vulnerabilities
No description provided by source. --------------------------------------------------------------------------- GeekLog = 1.4.0 CONFpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Google d0rk: powered by geeklog Discovered By...
LiveZilla < 5.1.2.1 Multiple Vulnerabilities
The version of LiveZilla hosted on the remote web server is affected by multiple vulnerabilities : - The application is affected by multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. Note that CVE-2013-7003 was reportedly fixed in version...
Debian DSA-2794-1 : spip - several vulnerabilities
Several vulnerabilities have been found in SPIP, a website engine for publishing, resulting in cross-site request forgery on logout, cross-site scripting on author page, and PHP injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
[SECURITY] [DSA 2794-1] spip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2794-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 10, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2794-1 (spip - several vulnerabilities)
Several vulnerabilities have been found in SPIP, a website engine for publishing, resulting in cross-site request forgery on logout, cross-site scripting on author page, and PHP injection. OpenVAS Vulnerability Test $Id: deb2794.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from adviso...
DSA-2794-1 spip - several
Bulletin has no description...
Debian: Security Advisory (DSA-2794-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
XAMPP 1.8.1 - 'lang.php?WriteIntoLocalDisk method' Local Write Access
============================================= INTERNET SECURITY AUDITORS ALERT 2013-007 - Original release date: March 14th, 2013 - Last revised: March 19th, 2013 - Discovered by: Manuel García Cárdenas - Severity: 6,8/10 CVSS Base Score - CVE-ID: CVE-2013-2586...
Updates Fix PHP-Injection Flaw in Popular WordPress Plugins
A pair of popular WordPress plugins used to help sites cache content have fixed serious vulnerabilities that attackers could exploit simply by including special HTML code in a comment. Both WP Super Cache and W3 Total Cache contained a vulnerability that allowed for PHP code injection through a...
DataLife Engine 'catlist' Parameter PHP Code Injection Vulnerability
DataLife Engine is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system. Other attacks are also...