Sql injection

Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

DocMan 1.3 RC2 allows remote attackers to obtain sensitive information the full path via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-0380

DocMan 1.3 RC2 allows remote attackers to obtain sensitive information the full path via unspecified vectors...

CVE-2007-0379

Cross-site scripting XSS vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-0379

CVE-2007-0379 describes a cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The NVD entry notes a MEDIUM severity (CVSSv2: AV:N/AC:M/Au:N/C:P/I:P/A:P) with partial impacts on confidentiality, integrity, a...

CVE-2007-0378

Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors...

Solaris 8 (sparc) : 113886-49

The remote host is missing Sun Security Patch number 113886-49 OpenGL 1.3: OpenGL Patch for Solaris 32-bit. Date this patch was last updated by Sun : Thu Nov 13 05:03:25 MST 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Solaris 7 (sparc) : 113886-49

The remote host is missing Sun Security Patch number 113886-49 OpenGL 1.3: OpenGL Patch for Solaris 32-bit. Date this patch was last updated by Sun : Thu Nov 13 05:03:25 MST 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

CVE-2007-0232

PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the jssShopFileSystem parameter...

CVE-2007-0232

The CVE-2007-0232 entry affects Jshop Server 1.3 and is a PHP remote file inclusion in routines/fieldValidation.php, exploitable via a URL in the jssShopFileSystem parameter. The underlying issue allows an attacker to execute arbitrary PHP code remotely. The provided sources indicate a web-based ...

CVE-2007-0232

PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the jssShopFileSystem parameter...

EUVD-2007-0234

PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the jssShopFileSystem parameter...

jshop13-rfi.txt

========================================================================== scripts : Jshop Server 1.3 Discovered By : irvian script : http://www.jshop.co.uk/ Thanks To : hitamputih nyubicrew patihack special To : nyubi,ibnusina,arioo,jipank,kacung,trangkil,cahgemblunkz dork : powered by Jshop...

Jshop Server 1.3

========================================================================== scripts : Jshop Server 1.3 Discovered By : irvian script : http://www.jshop.co.uk/ Thanks To : hitamputih nyubicrew patihack special To : nyubi,ibnusina,arioo,jipank,kacung,trangkil,cahgemblunkz dork : powered by Jshop...

Jshop Server 1.3 (fieldValidation.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Jshop Server 1.3 fieldValidation.php Remote File Include Vulnerability ========================================================================...

CVE-2007-0121

Cross-site scripting XSS vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2007-0121

Cross-site scripting XSS vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2007-0121

CVE-2007-0121 is an XSS vulnerability in RI Blog 1.3 (search.asp) that allows remote attackers to inject arbitrary script/HTML via the q parameter. Public records cite a CVSS v2 base score of 6.8 (Medium), with network attack vector and partial impact to confidentiality, integrity, and availabili...

riblog-xss.txt

BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : RI Blog 1.3 Script Download : http://www.aspindir.com/indir.asp?id=4098 Risk : High Found By : ShaFuck31 Vulnerable file : search.asp Vulnerable : http://www.victim.com/BlogPath/search.asp?q=XSS ExampLe :...