AROUNDMe <= 0.5.2 [templatePath] Remote File Include Vulnerability

--------------------------------------------------------------------------- AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes...

AROUNDMe 0.5.2 - 'templatePath' Remote File Inclusion

--------------------------------------------------------------------------- AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes...

aspbbXSS.txt

This xss works on Aspbb Forums Homapage : http://www.aspbb.org Version : 0.5.2 Exploit: http://www.example.com/default.asp?action="alert'Xss Vulnerability'; http://www.example.com/profila.asp?get="alert'Xss Vulnerability';&URL=%2FDefault%2Easp%3F TeufeL // Netkabus.Com Research And Develop Group...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter to default.asp or 2 get parameter to profile.asp...

CVE-2006-2497

CVE-2006-2497 affects AspBB 0.5.2 and describes two cross-site scripting (XSS) vulnerabilities : an XSS vector via the action parameter to default.asp and via the get parameter to profile.asp. The NVD summary lists a network-vector, with a base score of 5.8 (Medium) and partial confidentiality/in...

AspBB Forum "profile.asp & default.asp" XSS Vulnerability

This xss works on Aspbb Forums Homapage : http://www.aspbb.org Version : 0.5.2 Exploit: http://www.example.com/default.asp?action="scriptalert'Xss Vulnerability';/script http://www.example.com/profila.asp?get="scriptalert'Xss Vulnerability';/script&URL=2FDefault2Easp3F TeufeL // Netkabus.Com...

[Full-disclosure] PAJAX Remote Code Injection and File Inclusion Vulnerability

Advisory: PAJAX Remote Code Injection and File Inclusion Vulnerability RedTeam has identified two security flaws in PAJAX. It is possible to execute arbitrary PHP code from unchecked user input. Additionally, it is possible to include arbitrary files on the server ending in ".class.php". Details...

CVE-2006-1042

Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the 1 folder parameter to feed.php or 2 rssquery parameter to search.php...

CVE-2006-1041

Multiple cross-site scripting XSS vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 rssquery parameter to search.php or 2 tag parameter to tags.php...

CVE-2005-2179

PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via the path parameter...

CVE-2005-2179

CVE-2005-2179 describes a PHP remote file inclusion vulnerability in Jaws (BlogModel.php) affecting version 0.5.2 and earlier. The flaw allows an attacker to include URLs via the path parameter, enabling arbitrary PHP code execution on the web server. Affected software is the Jaws CMS written in ...