Solaris 9 (sparc) : 122159-03

The remote host is missing Sun Security Patch number 122159-03 SNMP 1.4 support Netra-210. Date this patch was last updated by Sun : Fri Nov 03 18:29:02 MST 2006 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as th...

BirdBlog 1.4 - '/admin/comments.php?month' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21184/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

CVE-2006-5927

Affected software: ASP Scripter Easy Portal 1.4 and Live Support 1.3. - Vulnerability: SQL injection in cpLogin.asp that allows remote attackers to execute arbitrary SQL commands via the Password parameter. - Root cause: improper handling of the Password parameter leading to SQL command injection...

Echo Security Advisory 2006.59

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...

Agora 1.4 RC1 (MysqlfinderAdmin.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Agora 1.4 RC1 MysqlfinderAdmin.php Remote File Include Vulnerability ====================================================================== \ /\ \ / | \ \ | / \ // / |...

Solaris 9 (sparc) : 117767-05

Mozilla 1.4: Base Libraries patch. Date this patch was last updated by Sun : Jul/05/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...

CVE-2006-5631

Cross-site scripting XSS vulnerability in changepass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the action parameter is not "1", as demonstrated using script in the action parameter, a different vulnerability than CVE-2006-56...

CVE-2006-5632

Cross-site scripting XSS vulnerability in changepass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-5631. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2006-5632

CVE-2006-5632 describes an XSS vulnerability in iG Shop 1.4 affecting change_pass.php via the id parameter. The root cause is improper handling/validation of the id parameter in that script, enabling remote attackers to inject arbitrary web script or HTML. The connected PT Security entries (PT-20...

CVE-2006-5631

CVE-2006-5631: XSS in iG Shop 1.4's change_pass.php. Vulnerable when action parameter is not "1" (arbitrary query strings may inject script/HTML). Affected file: change_pass.php in iG Shop 1.4. CVSS v2 base score 6.8 (Medium). Mitigations in connected PT Security notes suggest restricting access ...

PT-2006-6339 · Ig · Ig Shop

Name of the Vulnerable Software and Affected Versions: iG Shop version 1.4 Description: The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings in the change pass.php file when the action...

PT-2006-6340 · Ig · Ig Shop

Name of the Vulnerable Software and Affected Versions: iG Shop version 1.4 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the id parameter in the change pass.php file. Recommendations: For iG Shop version 1.4, avoid using...

CVE-2006-5244

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 downstat.php, 2 file.php, 3 findfile.php, 4 libreadfile.php, and 5...

CVE-2006-5241

CVE-2006-5241 affects OpenDock Easy Gallery ≤ 1.4. Multiple PHP remote file inclusion (RFI) flaws arise when register_globals is enabled. An attacker can cause the application to load arbitrary PHP code by passing a URL in the doc_directory parameter across several scripts (sw/lib_user/file.php, ...

CVE-2006-5081

The CVE-2006-5081 entry documents a PHP remote file inclusion in QuickBlogger (QB) 1.4, exploited via a URL in the page parameter of acc.php, enabling remote attackers to execute arbitrary PHP code. Affected software: QuickBlogger 1.4; vulnerability type: PHP RFI in acc.php. Impact: arbitrary cod...

Web//News 1.4 - 'parser.php' Remote File Inclusion (2)

source: https://www.securityfocus.com/bid/20239/info Web//News is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute i...

QB ( QuickBlogger ) =>1.4 Remote File Include Vulnerabilities

QB QuickBlogger =1.4 Remote File Include Vulnerabilities Script.............. :QB QuickBlogger Discovered By.... :YouYou Location .......... : Iran Class.............. : Remote Spical TNX : O.U.T.L.A.W , A.r.i.a , Sh3ll , T3rr0r1st CodE : ? include $page; ? ExPloit :...

Web//News 1.4 - 'parser.php' Remote File Inclusion (1)

============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v1.4...

Quickblogger 1.4 - Remote File Inclusion

source: https://www.securityfocus.com/bid/20210/info Quickblogger is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer...