Vt-Forum Lite 1.3 - 'vf_info.asp?StrMes' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21428/info Vt-Forum Lite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting use...

CVE-2006-6071

TWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and "ErrorDocument 401" redirects to a valid wiki topic, does not properly handle failed login attempts, which allows remote attackers to read arbitrary content by cancelling out of a failed authentication with...

CVE-2006-5927

Affected software: ASP Scripter Easy Portal 1.4 and Live Support 1.3. - Vulnerability: SQL injection in cpLogin.asp that allows remote attackers to execute arbitrary SQL commands via the Password parameter. - Root cause: improper handling of the Password parameter leading to SQL command injection...

phpPeanuts 1.3 Beta (Inspect.php) Remote File Include Vulnerability

No description provided by source. .:: Preface ::. Type : Remote File Include Scripts : Phppeanuts 1.1 Download : http://scripts.ringsworld.com/development-tools/phppeanuts-1-1.zip Founder : Hidayat Sagita aka bomm3x Contact : hidayat.sagitaatgmaildotcom .:: What ? ::. In Inspect.php file on line...

CVE-2006-5934

SQL injection vulnerability in Estate Agent Manager 1.3 and earlier affects admin/default.asp. The flaw allows remote attackers to execute arbitrary SQL commands via the UserName field, enabling potential data disclosure or modification. This is supported by the CVE/NVD entry (CVE-2006-5934) and ...

phpPeanuts 1.3 Beta (Inspect.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== phpPeanuts 1.3 Beta Inspect.php Remote File Include Vulnerability =================================================================== .:: Preface ::. Type : Remote File...

CVE-2006-5604

Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the CardLanguageFile parameter...

CVE-2006-5587

Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier Mdweb132-postgres allow remote attackers to execute arbitrary PHP code via a URL in the cheminappli parameter in 1 admin/inc/organisations/formorg.inc.php and 2 admin/inc/organisations/countryinsert.php...

CVE-2006-5587

Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier Mdweb132-postgres allow remote attackers to execute arbitrary PHP code via a URL in the cheminappli parameter in 1 admin/inc/organisations/formorg.inc.php and 2 admin/inc/organisations/countryinsert.php...

PHP Cards <= 1.3 Remote File Inclue Vulnerability

===================================================================== PHP Cards = 1.3 Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download Script :...

CVE-2006-5058: Undefined Security Weakness

Buffer overflow in 1 Call of Duty 1.5b and earlier, 2 Call of Duty United Offensive 1.51b and earlier, and 3 Call of Duty 2 1.3 and earlier allows remote attackers to execute arbitrary code via a long map argument to the "callvote map" command...

[SA21997] Amazing Little Poll "lp_settings.inc" Password Disclosure

TITLE: Amazing Little Poll "lpsettings.inc" Password Disclosure SECUNIA ADVISORY ID: SA21997 VERIFY ADVISORY: http://secunia.com/advisories/21997/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Amazing Little Poll 1.x...

Signkorn Guestbook <= v1.3 (dir_path) Remote File Inclusion Exploit

============================================================================================== Signkorn Guestbook = v1.3 dirpath Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

Signkorn Guestbook <= 1.3 (dir_path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Signkorn Guestbook = 1.3 dirpath Remote File Include Vulnerability ======================================================================...

Telekorn Signkorn Guestbook 1.x - helpenadminhelp0.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - helpenadminhelp0.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may all...

Telekorn Signkorn Guestbook 1.x - smile.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - smile.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the...

Telekorn Signkorn Guestbook 1.x - adminlog.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - adminlog.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the...

Telekorn Signkorn Guestbook 1.x - adminconfig.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - adminconfig.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow th...

Telekorn Signkorn Guestbook 1.x - entry.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - entry.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the...

Telekorn Signkorn Guestbook 1.x - includesadmin.inc.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - includesadmin.inc.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may...