WSN Guest 1.21 - id SQL Injection

WSN Guest 1.21 - id SQL Injection WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit SQL Injection Code Search Board ALL UniquE-KeyUniquE-Cracker [email protected] f...

CVE-2006-6758

CVE-2006-6758 affects Http Explorer 1.02. The vulnerability is a directory traversal that allows a remote attacker to read arbitrary files by using a .. sequence in the URI. The connected documents do not provide exploitation details or a remediation/version fix. If applicable, patch/version info...

CVE-2006-6724

The CVE-2006-6724 entry concerns BolinTech Dream FTP Server 1.02. The issue allows remote authenticated users, including anonymous users, to trigger a denial of service (application crash) by sending a certain invalid PORT command. This is the stated impact; the affected component is the FTP serv...

Http explorer Web Server 1.02 Directory Transversal Vulnerability

Exploit for unknown platform in category remote exploits ================================================================= Http explorer Web Server 1.02 Directory Transversal Vulnerability ================================================================= Http explorer Web Server 1.02 Directory...

CVE-2006-4853

SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp...

CVE-2006-4853

SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp...

CVE-2006-4853

The CVE-2006-4853 entry describes an SQL injection vulnerability affecting Haberx, specifically in kategorix.asp (versions 1.02 through 1.1) where the id parameter in kategorihaberx.asp can be exploited to execute arbitrary SQL. The underlying issue is improper handling of user input in the appli...

CVE-2006-3260

Cross-site scripting XSS vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2006-3260

Cross-site scripting XSS vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2006-3260

CVE-2006-3260 affects vlbook 1.02. The vulnerability is a Cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary web script or HTML via the message parameter. No remediation details are provided in the supplied documents; exploitation information is not pres...

vlBookXSS.txt

vlBook 1.02 Advisory ==================== Date: ----- 2005 June 23 Product: -------- vlBook 1.02 © 2005 Vendor: ------- http://vlab.info/ Descriptions: ------------- The vlbook is a free, open source and light-weight guestbook written in PHP using flat files to store messages and settings. It com...

CVE-2006-3055

Summary (CVE-2006-3055) : The vulnerability affects VBZooM 1.02, with three SQL injection points in meaning.php exploited via the parameters (1) QuranID, (2) ShowByQuranID, and (3) Action. The provided sources describe remote execution of arbitrary SQL commands due to the vulnerable inputs, indic...

CVE-2006-3055

Multiple SQL injection vulnerabilities in VBZooM 1.02 allow remote attackers to execute arbitrary SQL commands via the 1 QuranID, 2 ShowByQuranID, or 3 Action parameters to meaning.php...

CVE-2006-2872

PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the configArrpathtodir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the configArrpathtodir parameter...

CVE-2006-2872

CVE-2006-2872 describes a PHP remote file inclusion in the web app Rumble 1.02 where an attacker can pass a URL in the configArr[pathtodir] parameter to config.php and cause arbitrary PHP code execution. The vulnerability is triggered remotely and can affect any affected deployment that uses the ...

CVE-2006-2872

PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the configArrpathtodir parameter...

# MHG Security Team ---Rumble 1.02 version Remote File Inc.

Milli-Harekat Advisory www.milli-harekat.org Rumble = 1.02 version - Remote File Include Vulnerabilities Risk : high Class: Remote Script : Rumble 1.02 version Msn : erne at ernealizm dot com Credits : ERNE Thanks : DjReMix,Thebekir,SpC-x,Eskobar,Blackened,Poizonbox,Dilejyoner And ALL MHG USERS...

[Full-disclosure] bigwebmaster guestbook multiply XSS

Affected software: Bigwebmaster Guestbook version 1.02 and down Vendor: http://www.bigwebmaster.com/Perl/ScriptsandPrograms/Guestbooks/ Introduction: taken from vendor site This is one of the most powerful guestbooks that you will find on the internet. Visitors who come to your site will be able ...

php-atm.txt

PHP Advanced Transfer Manager Download users password hashes PHP Advanced Transfer Manager 1. Site:http://phpatm.free.fr/ ---------------------------------------------------- Bugs: http://victim.com/path/users/username ---------------------------------------------------- example:...