AN Guestbook Local File Inclusion Vulnerability

AN Guestbook is prone to Local File Inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-2125

deletebug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs...

CVE-2009-2126

Cross-site scripting XSS vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title aka subject field...

Sql injection

SQL injection vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title aka subject field...

CVE-2009-2126

CVE-2009-2126 affects Elvin before 1.2.1. The vulnerability is a cross-site scripting (XSS) flaw in close_bug.php, where an attacker can inject arbitrary web script or HTML via the title (subject) field. This is documented across multiple sources (NVD, Red Hat, CVE List, Prion, etc.). The availab...

RQms (Rash) 1.2.2 - Multiple SQL Injections

Product : RQMS Version : 1.2.2 Dork : Rash Version: 1.2.1 Site: http://rqms.sourceforge.net Found by: Dimi4 Greetz: UASC http://uasc.org.ua, antichat Multiple Remote Vulnerabilities Need: magicquotesgpc = OFF 1Auth BYPASS http://127.0.0.1/rash-v1.2.2/?admin Login: ' OR 1=1/ 2 Sql-injection...

Joomla Component Maian Music 1.2.1 (category) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================ Joomla Component Maian Music 1.2.1 category SQL Injection Vuln ================================================================ Joomla Component MaianMusic SQL Injection...

FreeSSHd 1.2.1 (rename) Remote Buffer Overflow Exploit (SEH)

No description provided by source. FreeSSHd 1.2.1 rename Remote Buffer Overflow Exploit Advisory: http://www.bmgsec.com.au/advisory/45/ Original: http://www.bmgsec.com.au/advisory/32/ Related : http://www.bmgsec.com.au/advisory/42/ Test box: WinXP Pro SP2 English Exploit code for a vulnerability ...

PHORTAIL 1.2.1 - poster.php Multiple HTML Injection Vulnerabilities

PHORTAIL 1.2.1 - poster.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/34038/info PHORTAIL is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run i...

Phortail 1.2.1 Cross Site Scripting

PHORTAIL v1.2.1 XSS Vulnerability Module : PHORTAIL 1.2.1 download : http://www.phpscripts-fr.net/scripts/download.php?id=330 Vul : XSS Vulnerability file : poster.php Author : Jonathan Salwan Mail : submit AT shell-storm.org Web : http://www.shell-storm.org =Pseudo =E-mail alert'xss PoC';"=XSS...

Design/Logic Flaw

Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors...

Fhimage 1.2.1 Index Change Exploit

!/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1 http://www.flash-here.com/downloads/download.php?id=9 Remote...

Fhimage 1.2.1 Remote Index Change Exploit

Exploit for unknown platform in category web applications ========================================= Fhimage 1.2.1 Remote Index Change Exploit ========================================= !/usr/bin/perl -----------------------------------------------------------------------------------------------...

Fhimage 1.2.1 - Remote Command Execution (mq = off)

!/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1 http://www.flash-here.com/downloads/download.php?id=9 Remote...

Fhimage 1.2.1 - Remote Index Change

!/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1 http://www.flash-here.com/downloads/download.php?id=9 Remote...

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection source: https://www.securityfocus.com/bid/33300/info MKPortal is prone to multiple security vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, arbitrary-file-upload, and...

MKPortal 1.2.1 - '/modules/blog/index.php' Home Template Textarea SQL Injection

source: https://www.securityfocus.com/bid/33300/info MKPortal is prone to multiple security vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, arbitrary-file-upload, and insecure-temporary-file-creation vulnerabilities. Attackers can exploit these issues to execute...

MKPortal 1.2.1 - Multiple Vulnerabilities

MKPortal 1.2.1 - Multiple Vulnerabilities waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind "waraxe" Date: 15. January 2009 Location: Estonia, Tartu Web:...

CVE-2008-5764

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter...

CVE-2008-5765

WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt...