newsscript05.txt

Subject: --- "Newsscript version 0.5 print.php Local File Inclusion Vulnerability " Vulnerable version: --- "Newsscript version 0.5" Vendor URL: --- Emaill - [email protected] --- Website - http://webmaster-journal.com Available in: ---http://www.comscripts.com/scripts/php.wm-news.203.ht...

Newsscript <= 0.5 Remote and Local File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= Newsscript 2 3 27 include$filename; The second flaw is due to an input validation error in the "article.php" script that does not validate the "ide" parameter, which could be...

WM-News 0.5 - 'print.php' Local File Inclusion

source: https://www.securityfocus.com/bid/19968/info WM-News is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also...

WM-News 0.5 - print.php Local File Inclusion

WM-News 0.5 - print.php Local File Inclusion source: https://www.securityfocus.com/bid/19968/info WM-News is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and th...

CVE-2006-4366

PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4366

PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4119

SQL injection vulnerability in gc.php in GeheimChaos 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the Tempenteredpassword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4118

GeheimChaos 0.5 and earlier have multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. The weaknesses involve input fields in gc.php (Temp_entered_login, Temp_entered_email) and numerous parameters in include/registrieren.php (including, among other...

CVE-2006-4119

CVE-2006-4119 affects GeheimChaos 0.5 and earlier, describing an SQL injection in gc.php via the Temp_entered_password parameter that could allow remote execution of arbitrary SQL commands. The available sources confirm the vulnerable component and input parameter, with the underlying issue being...

LoudBlog 0.5 - SQL Injection Admin Credentials Disclosure

LoudBlog 0.5 - SQL Injection Admin Credentials Disclosure !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n...

LoudBlog 0.5 - SQL Injection / Admin Credentials Disclosure

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

CVE-2006-3296

SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset parameter...

CVE-2006-3296

SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset parameter...

CVE-2006-3295

Cross-site scripting XSS vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2006-3296

The CVE-2006-3296 entry describes a SQL injection in Open Guestbook 0.5, exploitable via the offset parameter in view.php to allow remote execution of arbitrary SQL commands. Affected software: Open Guestbook 0.5; vulnerable component: view.php (offset parameter). Underlying cause: improper sanit...

CVE-2006-3299

Cross-site scripting XSS vulnerability in index.php in Usenet Script 0.5 allows remote attackers to inject arbitrary web script or HTML via the group parameter...

CVE-2006-3295

Open Guestbook 0.5 is affected by a cross-site scripting (XSS) vulnerability in header.php, exploitable via the title parameter to inject arbitrary script/HTML. The issue is associated with the header.php file in Open Guestbook 0.5, enabling remote attackers to inject script or HTML through the t...

PT-2006-4189 · Open Guestbook · Open Guestbook

Name of the Vulnerable Software and Affected Versions: Open Guestbook version 0.5 Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the title parameter in the header.php file. Recommendations: For Open Guestbook version 0.5, avo...

MyServer-0.5.txt

/ MyServer 0.5 denial of service / / bug found by badpack3t. / / http://myserverweb.sourceforge.net / / / / $ gcc -o fms fms-0.5.c linux version / / $ gcc -o fms fms-0.5.c -DWINDOWS windows version / / / / $ ./fms / / / / Federico Fazzi / include include include if WINDOWS include pragma...

CVE-2006-2548

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast url attribute of an enclosure tag, or $encurl variable, which is executed when running wget...