1496 matches found
Half-Life/cstrike server remote DoS
Half-Life/cstrike server remote DoS DoS против Half-Life /cstrike dedicated server, build 3382 ver.28 актуальная nosteam версия. Автор,источник: Grey Greyatelcat.kg Опубликовано: 22 сентябрь 2006 г. Затронутые продукты: cstrike 1.6 nosteam, ver.28 Платформа : Windows Тип : Удалённая Опасность:...
CVE-2006-4276
The CVE-2006-4276 entry concerns a PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier. The issue allows remote code execution by supplying a URL to the TNLIB_DIR parameter in novalib/class.novaEdit.mysql.php. Affected software is Tutti Nova (version 1.6 and earlier); the root c...
CVE-2006-4277
Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the TNLIBDIR parameter to 1 include/novalib/class.novaAdmin.mysql.php and 2 novalib/class.novaRead.mysql.php. NOTE: the provenance of this information...
[SA21572] Tutti Nova "TNLIB_DIR" File Inclusion Vulnerabilities
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== Tutti Nova = 1.6 TNLIBDIR Remote File Include Vulnerability ===============================================================...
Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability
No description provided by source. ============================================================================================== Tutti Nova = v1.6 TNLIBDIR Remote File Inclusion Exploit =============================================================================================== Critical Level...
Lazarus Guestbook Cross Site Scripting Vulnerabilities
Produce : Lazarus Guestbook Website : http://carbonize.co.uk/Lazarus/ Version : = 1.6 Problem : Cross Site Scripting 1 The first probleme is in codes-english.php ,"show" parameter in lang/codes-english.php isn't properly sanitised This can be exploited to execute arbitrary HTML and javascript cod...
Pearl For Mambo <= 1.6 Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== Pearl For Mambo = 1.6 Multiple Remote File Include Vulnerabilities ===================================================================...
CVE-2006-2567
CVE-2006-2567 is an XSS vulnerability in the Alstrasoft Article Manager Pro 1.6, affecting the submit_article.php handler. The issue arises from unsafely handling user input in a STYLE attribute, enabling an attacker to inject JavaScript via a javascript: URI in a CSS property, potentially compro...
CVE-2006-2565
SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via 1 the authorid parameter in profile.php and 2 the autid parameter in userarticles.php. NOTE: the autid vector can produce resultant path disclosure if the SQL manipulati...
Remote file inclusion
PHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the ezUserManagerPath parameter to ezusermanagerpwdforgott.php, possibly due to an issue in ezusermanagercore.inc.php...
CVE-2006-2246
Cross-site scripting XSS vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry...
Cross site scripting
Cross-site scripting XSS vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry...
CVE-2006-2246
The CVE-2006-2246 entry documents a cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition. The flaw allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry. Affected product: UBlog 1.6 Access Edition. Root cause: unsanitized input in ...
CVE-2006-2246
Cross-site scripting XSS vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry...
UBlog Remote XSS Exploit
------------------------------------------------------------------ - UBlog Remote XSS Exploit - -= http://colander.altervista.org/advisory/UBlog.txt =- ------------------------------------------------------------------ -= UBlog 1.6 =- Omnipresent May 04, 2006 Vunerabilitys: ---------------- XSS...
Toast Forums 1.6 - Toast.asp Multiple Cross-Site Scripting Vulnerabilities
Toast Forums 1.6 - Toast.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17249/info Toast Forums is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
Toast Forums 1.6 - 'Toast.asp' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/17249/info Toast Forums is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed ...
XSS in <= Toast Forums 1.6
XSS in = Toast Forums 1.6 Vuln. discovered by : r0t Date: 25 march 2005 vendor:http://www.toastforums.com/ affected versions: 1.6 and prior orginal advisory: http://pridels.blogspot.com/2006/03/xss-in-toast-forums-16.html Vuln. Description. Toast Forums contains a flaw that allows a remote cross...
Directory traversal
Directory traversal vulnerability in WinHKI 1.6 and earlier allows user-assisted attackers to overwrite arbitrary files via a 1 RAR, 2 TAR, 3 ZIP, or 4 TAR.GZ archive with a file whose file name contains ".." sequences...