4163 matches found
PT-2007-2717 · Li · Li-Guestbook
Name of the Vulnerable Software and Affected Versions: LI-Guestbook versions 1.1 through 1.2 Description: The issue allows remote attackers to execute arbitrary SQL commands via the country parameter in the guestbook.php file when magic quotes gpc is disabled. Recommendations: For versions 1.1 an...
News-Letterman 1.1 (eintrag.php sqllog) Remote File Include Exploit
No description provided by source. !/usr/bin/perl News-Letterman 1.1 eintrag.php Remote File Include Exploit Download: http://www.weltennetz.de/download/letterman1.1.zip Vulnerable Code: include $sqllog; Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0k...
News-Letterman 1.1 - eintrag.php?sqllog Remote File Inclusion
News-Letterman 1.1 - eintrag.php?sqllog Remote File Inclusion !/usr/bin/perl News-Letterman 1.1 eintrag.php Remote File Include Exploit Download: http://www.weltennetz.de/download/letterman1.1.zip Vulnerable Code: include $sqllog; Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shel...
aWebNews v 1.1=>RFI
To ConTacT mE @ www.Asb-May.net/bb ScRiPt:-http://scripts.ringsworld.com/news-publishing/awebnews.zip GrEaTz To:-ToOofa-HaCk.eGy All AsB-MaY DisCoverY ExPloIts GrOup Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP comment.php:- sendmsg:- include...
CVE-2007-1165
DBGuestBook 1.1 is affected by three PHP remote file inclusion flaws in includes/ (utils.php, guestbook.php, views.php) triggered by a crafted URL in the dbs_base_path parameter, allowing arbitrary PHP code execution. Root cause: improper handling of dbs_base_path. Public exploit references exist...
Remote file inclusion
PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the htpfad parameter...
DBGuestbook 1.1 (dbs_base_path) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== DBGuestbook 1.1 dbsbasepath Remote File Include Vulnerabilities =================================================================== DBGuestBook 1.1 Found by Denven ERROR:...
CVE-2006-7002
Cross-site scripting XSS vulnerability in addcomment.php in Wheatblog wB 1.1 allows remote attackers to inject arbitrary web script or HTML via the Email field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue may...
CVE-2006-6993
CVE-2006-6993 concerns multiple SQL injection flaws in Neuron Blog 1.1, specifically in pages/addcomment2.php. The vulnerabilities allow remote attackers to inject arbitrary SQL via the (1) commentname, (2) commentmail, (3) commentwebsite, or (4) comment parameters, leading to potential data inte...
CVE-2006-6993
Multiple SQL injection vulnerabilities in pages/addcomment2.php in Neuron Blog 1.1 allow remote attackers to inject arbitrary SQL commands via the 1 commentname, 2 commentmail, 3 commentwebsite, and 4 comment parameters. NOTE: the provenance of this information is unknown; the details are obtaine...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in local Calendar System 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 TEMPLATEDIR parameter to a showinvoices.php, b showmonth.php, c showevents.php, d retrieveinvoice.php, e modifyitem.php, and f lookupuserid.php; ...
Photo Galerie Standard <= 1.1 (view.php) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Photo Galerie Standard = 1.1 view.php SQL Injection Vulnerability ==================================================================== Title : Photo Galerie Standard = 1....
local Calendar System v1.1 (lcStdLib.inc) Remote File Include
+------------------------------------------------------------------------------------------- local Calendar System v1.1 lcStdLib.inc Remote File Include TrZiNDaN [email protected] Turkey -------------------------------------------------------------------------------------------- download :...
MOAB-25-01-2007.rb.txt
!/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session = webserver.accept randclen = rand80 useragent =...
Vote-Pro 4.0 - poll_frame.php?poll_id Remote Code Execution
Vote-Pro 4.0 - pollframe.php?pollid Remote Code Execution r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com Vote-Pro Code Injection 0day Exploit Software: Vote-Pro 4.0 Vendor: http://www.vote-pro.com/ Released: 2007/01/23 Discovered & Exploit By: r0ut3r writ3r at gmail.com...
CVE-2007-0399
SMF 1.1 RC3 exposes multiple XSS flaws in index.php during the PM “send” action. Infected input (recipient/BCC fields) can inject arbitrary script/HTML in the context of an authenticated user. Affected: Simple Machines Forum (SMF), version 1.1 RC3; vulnerability arises in the PM sending workflow....
SMF 1.1 - index.php HTML Injection
SMF 1.1 - index.php HTML Injection source: https://www.securityfocus.com/bid/22143/info SMF is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute ...
SMF 1.1 - 'index.php' HTML Injection
source: https://www.securityfocus.com/bid/22143/info SMF is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute in the context of the affected...
CVE-2007-0389
The CVE-2007-0389 issue affects ArsDigita Community System (ACS) 3.4.10 and earlier and ArsDigita Community Education Solution (ACES) 1.1. It is a directory traversal vulnerability that lets an attacker read arbitrary files by sending URIs containing double-encoded sequences like .%252e/. The pro...
Fedora Core 5 : thunderbird-1.5.0.4-1.1.fc5 (2006-717)
Several security issues have been identified that are fixed in this release. Please refer to http://www.mozilla.org/projects/security/known-vulnerabilities.htmlth underbird1.5.0.4 for details. Users of Thunderbird are advised to update to this package, which contains version 1.5.0.4 of Thunderbir...