Unfixed XSS vulnerability at securite.naoss.fr

Security researcher chat-man, has submitted on 05/06/2008 a cross-site-scripting XSS vulnerability affecting securite.naoss.fr, which at the time of submission ranked 12551905 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2008. It is...

CVE-2008-2074

Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...

CVE-2008-2074

Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...

CVE-2008-2074

CVE-2008-2074 affects Harris Wap Chat 1.0. Multiple PHP remote file inclusion vulnerabilities occur when register_globals is enabled. Attackers can cause arbitrary PHP code execution by supplying a URL in the sysFileDir parameter to a set of scripts (eng.writeMsg.php, eng.adCreate.php, eng.adCrea...

oxyproject-exec.txt

OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability Script : http://puzzle.dl.sourceforge.net/sourceforge/oxyproject/OxYBox085uns.zip Code Vuln : Ln 24 include'oxycfg.php'; // // Editing the Chat History // $editfile = $file'ChatHistory'; $fh = fopen$editfile, 'a' or die"Error...

harris-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Harris Wap Chat Discovered By : k1n9k0ng Scripts site : http://www.successkid.com/ Download Script : http://www.successkid.com/blogs/?p=2 Thanks To : sekuritionline, semprol, bajingan, mimid,...

OxYProject 0.85 (edithistory.php) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ===================================================================== OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability ===================================================================== OxYProject 0.85 edithistory.php...

OxYProject 0.85 (edithistory.php) Remote Code Execution Vulnerability

No description provided by source. OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability Script : http://puzzle.dl.sourceforge.net/sourceforge/oxyproject/OxYBox085uns.zip Code Vuln : Ln 24 include'oxycfg.php'; // // Editing the Chat History // $editfile = $file'ChatHistory'; $fh =...

Harris WapChat 1 - Multiple Remote File Inclusions

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Harris Wap Chat Discovered By : k1n9k0ng Scripts site : http://www.successkid.com/ Download Script : http://www.successkid.com/blogs/?p=2 Thanks To : sekuritionline, semprol, bajingan, mimid,...

Harris WapChat 1 - Multiple Remote File Inclusions

Harris WapChat 1 - Multiple Remote File Inclusions +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Harris Wap Chat Discovered By : k1n9k0ng Scripts site : http://www.successkid.com/ Download Script : http://www.successkid.com/blogs/?p=2 Thanks T...

OxYProject 0.85 - 'edithistory.php' Remote Code Execution

OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability Script : http://puzzle.dl.sourceforge.net/sourceforge/oxyproject/OxYBox085uns.zip Code Vuln : Ln 24 include'oxycfg.php'; // // Editing the Chat History // $editfile = $file'ChatHistory'; $fh = fopen$editfile, 'a' or die"Error...

Remote file inclusion

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter...

CVE-2008-1989

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter...

CVE-2008-1989

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter...

CVE-2008-1989

CVE-2008-1989 : PHP remote file inclusion in the 123 Flash Chat 6.8.0 module for e107 (123flashchat.php) allows remote code execution when register_globals is enabled. Exploitation occurs via a URL in the e107path parameter, enabling arbitrary PHP execution. The vulnerability is classified with a...

e107 Module 123 Flash Chat 6.8.0 Remote File Inclusion Vulnerability

No description provided by source. E107 Chat Module 123FlashChat Remote File Inclusion Vulnerability AUTHOR : bycasper41 Mekan : Cyber-Warrior.Org MA陌L : [email protected] Download: http://www.123flashchat.com/download/e107modfor123flashchat6.8.0.zip DORKS : "123flashchat.php" EXPLOITS :...

e107 module 123 flash chat 6.8.0 - Remote File Inclusion

e107 module 123 flash chat 6.8.0 - Remote File Inclusion E107 Chat Module 123FlashChat Remote File Inclusion Vulnerability AUTHOR : bycasper41 Mekan : Cyber-Warrior.Org MAÄ°L : [email protected] Download: http://www.123flashchat.com/download/e107modfor123flashchat6.8.0.zip DORKS :...

e107 Module 123 Flash Chat 6.8.0 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== e107 Module 123 Flash Chat 6.8.0 Remote File Inclusion Vulnerability ==================================================================== E107 Chat Module 123FlashChat...

e107chat-rfi.txt

E107 Chat Module 123FlashChat Remote File Inclusion Vulnerability AUTHOR : bycasper41 Mekan : Cyber-Warrior.Org MAİL : [email protected] Download: http://www.123flashchat.com/download/e107modfor123flashchat6.8.0.zip DORKS : "123flashchat.php" EXPLOITS :...