494 matches found
GeBlog 0.1 GLOBALS[tplname] Local File Inclusion Exploit (win)
Exploit for unknown platform in category web applications ============================================================== GeBlog 0.1 GLOBALStplname Local File Inclusion Exploit win ============================================================== !/usr/bin/perl GeBlog 0.1GLOBALStplnameLocal File...
netForo! 0.1 (down.php file_to_download) Remote File Disclosure Vuln
Exploit for unknown platform in category web applications ==================================================================== netForo! 0.1 down.php filetodownload Remote File Disclosure Vuln ==================================================================== netForo 0.1gfiletodownloadRemote Fil...
netForo! 0.1 - 'down.php?file_to_download' Remote File Disclosure
netForo 0.1gfiletodownloadRemote File Disclosure Exploit D.Script: http://sourceforge.net/projects/netforo/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group V.Code: readfile$GET'filetodownload';...
netForo! 0.1 - down.php?file_to_download Remote File Disclosure
netForo! 0.1 - down.php?filetodownload Remote File Disclosure netForo 0.1gfiletodownloadRemote File Disclosure Exploit D.Script: http://sourceforge.net/projects/netforo/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group...
CVE-2006-7089
SQL injection vulnerability in connexion.php in Ban 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-7089
CVE-2006-7089: A SQL injection vulnerability affects Ban 0.1 in the file connexion.php, exploitable via the id parameter to execute arbitrary SQL commands. The vulnerability is due to improper input handling in the PHP script. Exploitation status or in-the-wild details are not provided in the sup...
CVE-2007-1104
The CVE-2007-1104 entry concerns PHP Module Implementation (PHP-MIP) 0.1, specifically a vulnerability in top.php that allows remote attackers to execute arbitrary PHP code via a URL supplied to the laypath parameter (remote file inclusion). The problem is caused by improper handling of the laypa...
CVE-2007-1026
CVE-2007-1026 is a SQL injection in XLAtunes prior to or including 0.1, exploitable via the album parameter in view mode. The underlying issue is improper handling of user-supplied input in view.php, allowing remote attackers to craft arbitrary SQL commands (injections) with network access. The p...
XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
Critical Status:High Found By:Bl0od3r Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends fuckz:Donh4cky0u for steeling hacks of others,for his 100 noobility,for his noobass.DON your an idiot.fucka. - confkey-Password confvalue-Username Table:config...
XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
No description provided by source. Critical Status:High Found By:Bl0od3r Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends fuckz:Donh4cky0u for steeling hacks of others,for his 100% noobility,for his noobass.DON your an idiot.fucka. - confkey-Password...
CVE-2007-0545
Maxtricity Tagger 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for tagger.mdb...
Fedora Core 5 : qt-3.3.7-0.1.fc5 (2006-1056)
A security flaw was recently discovered in the way Qt 3.x pixmap images. This issue can occur only when transforming specially prepared images from untrusted sources. Qt 3.3.7 corrects this flaw. Note that Tenable Network Security has extracted the preceding description block directly from the...
Article System 0.1 - 'INCLUDE_DIR' Remote File Inclusion
Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus Bug in:/path/include Vul Code; requireonce "$INCLUDEDIR/classes/class.formitem.php"; POC:...
CVE-2006-6747
SQL injection vulnerability in shownews.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...
CVE-2006-6746
The CVE concerns Xt-News 0.1, where multiple cross-site scripting (XSS) vulnerabilities affect user-supplied input via the id_news parameter. Specifically, the flaws can be triggered through add_comment.php or show_news.php, enabling remote attackers to inject arbitrary web script or HTML. Impact...
CVE-2006-6746
Multiple cross-site scripting XSS vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the idnews parameter to 1 addcomment.php or 2 shownews.php...
Xt-News 0.1 : SQL Injection Vulnerability & XSS
Xt-News 0.1 ----------- Vendor site: http://dreaxteam.free.fr/forums/ Product: Xt-News 0.1 Vulnerability: SQL Injection Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 10/12/06 Public disclosure: 22/12/06 Description: ------------ SQL Injection Vulnerability:...
Xt-News 0.1 - 'show_news.php?id_news' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to steal cookie-based...
Xt-News 0.1 - 'add_comment.php?id_news' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to steal cookie-based...