sBlog_0.72_xss.txt

sBlog 0.7.2 == Multiple Cross-Site Scripting Vulnerability =================================== Information of Software: Software: sBlog 0.7.2 Site: http://servous.se/ Description: sBlog is a simple and new PHP Blog. Is very very simple and it's use by newbie of PHP...

CVE-2006-0857

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

Cross site scripting

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

CVE-2006-0857

CVE-2006-0857 is an XSS vulnerability in the Chatbox Plugin 1.0 for e107 0.7.2. The issue allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element. Reported impact corresponds to a MEDIUM base score (CVSSv2: 4.3; I: PARTIAL). The connect...

CVE-2006-0857

Cross-site scripting XSS vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element...

[SA18733] Heimdal rshd Server Privilege Escalation Vulnerability

TITLE: Heimdal rshd Server Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA18733 VERIFY ADVISORY: http://secunia.com/advisories/18733/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Heimdal 0.6.x http://secunia.com/product/3299/ Heimdal 0.7.x...

CVE-2004-2368

The CVE-2004-2368 issue affects Opt-X 0.7.2, where header.php is vulnerable to a PHP remote file inclusion via the systempath parameter, enabling remote code execution. The documented vulnerable component is header.php in Opt-X 0.7.2, with the root cause described as improper handling of the syst...

CVE-2004-2368

PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter...

CVE-2004-1796

CVE-2004-1796 concerns a PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying manipulated values to either the config[header] parameter in hotnews-engine.inc.php3 or the config[incdir] parameter in hnmain.inc....

CVE-2004-2063

Cross-site scripting XSS vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inject arbitrary HTML or web script via the feedback parameter...

CVE-2004-2063

CVE-2004-2063 is an XSS vulnerability in AntiBoard 0.7.2 and earlier, located in antiboard.php. The flaw allows remote attackers to inject arbitrary HTML or UWS script via the feedback parameter. The description refers to cross-site scripting as the vulnerability class, with the affected version ...

CVE-2004-1865

Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...

CVE-2004-1796

PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the 1 configheader parameter to hotnews-engine.inc.php3 or 2 configincdir parameter to hnmain.inc.php3...

PT-2004-3262 · Opt X · Opt-X

Name of the Vulnerable Software and Affected Versions: Opt-X version 0.7.2 Description: The issue allows remote attackers to execute arbitrary PHP code via the systempath parameter in the header.php file. Recommendations: For Opt-X version 0.7.2, consider restricting access to the header.php file...

tanned < 0.7.2 Remote Format String

Binary data 1889.prm...

AntiBoard 0.6/0.7 - &#039;antiboard.php?feedback&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/10821/info Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability. AntiBoard versions 0.7.2 a...

AntiBoard 0.6/0.7 - &#039;antiboard.php&#039; Multiple SQL Injections

source: https://www.securityfocus.com/bid/10821/info Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability. AntiBoard versions 0.7.2 a...

HotNews arbitary file inclusion

HotNews arbitary file inclusion. ===+++===+++===+++ Product: HotNews Version: = v0.7.2 Vendor: http://sourceforge.net/projects/hotnews/ Bug discovered by: Officerrr [email protected] Vendor Response: Not contacted yet. ===+++===+++===+++ Problem 1: ===+++===+++===+++ Attacker can include a...