687 matches found
CVE-2007-6231
Vulnerability: CVE-2007-6231 affects tellmatic 1.0.7 with multiple PHP remote file inclusion flaws that allow an attacker to execute arbitrary PHP code via a URL in tm_includepath for files under include/, including Classes.inc.php, statistic.inc.php, status.inc.php, status_top_x.inc.php, and lib...
CVE-2007-6231
Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tmincludepath parameter to 1 Classes.inc.php, 2 statistic.inc.php, 3 status.inc.php, 4 statustopx.inc.php, or 5 libchart-1.1/libchart.php in include/. NOTE:...
DSA-1417-1 asterisk - SQL injection
Bulletin has no description...
tellmatic 1.0.7 - Multiple Remote File Inclusions
tellmatic 1.0.7 - Multiple Remote File Inclusions tellmatic 1.0.7 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : tellmatic 1.0.7 --------------------- Download :...
tellmatic 1.0.7 Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== tellmatic 1.0.7 Multiple Remote File Inclusion Vulnerabilities ============================================================== tellmatic 1.0.7 RFI --------------------- Author :...
tellmatic 1.0.7 - Multiple Remote File Inclusions
tellmatic 1.0.7 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : tellmatic 1.0.7 --------------------- Download : http://downloads.sourceforge.net/tellmatic/tellmatic-1.0.7.tgz?modtime=1196381865&bigmirror=0 -------------------...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...
Vulnerability in theme Pool 1.0.7 for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в теме Pool 1.0.7 для WordPress. XSS: http://site/index.php/223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимость связана с недостаточной фильтрацией переменной PHPSELF. Дополнительная информация о данной...
CVE-2007-3963
Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...
CVE-2007-3963
Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...
UseBB 1.0.7 - installupgrade-0-3.php?PHP_SELF Cross-Site Scripting
UseBB 1.0.7 - installupgrade-0-3.php?PHPSELF Cross-Site Scripting source: https://www.securityfocus.com/bid/24990/info UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
CVE-2007-1934
Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALSname parameter...
Directory traversal
Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALSname parameter...
CVE-2007-1934
CVE-2007-1934 affects the PHP-Nuke eBoard 1.0.7 module. The vulnerability is a directory traversal in member.php that allows remote attackers to include and execute arbitrary local files by supplying a .. in the GLOBALS[name] parameter. Multiple connected sources corroborate this exact issue and ...
PT-2007-1292 · Simple Machines · Simple Machines Forum
Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions 1.0.7 and earlier Simple Machines Forum SMF version 1.1rc2 and earlier Description: The issue allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP...
CVE-2007-0376
Cross-site scripting XSS vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-0376
CVE-2007-0376 is a cross-site scripting (XSS) vulnerability in VirtueMart 1.0.7 that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software: VirtueMart 1.0.7. Root cause and exact vectors are not specified beyond the generic XSS description. Impa...
CVE-2006-6945
CVE-2006-6945: SQL injection vulnerability in VirtueMart 1.0.7 allows remote execution of arbitrary SQL commands via unspecified vectors, probably via Itemid, product_id and category_id parameters handled in virtuemart_parser.php. Documents show affected software and potential impact but do not p...
