ncaster-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Ncaster 1.7.2 Discovered By : k1n9k0ng Scripts site : http://ncastercms.com/downloads/ncaster172.zip Thanks To : sekuritionline, semprol, mimid, r.i.p, x-code, yogyafree special To : adhietslank,...

Ncaster 1.7.2 - archive.php Remote File Inclusion

Ncaster 1.7.2 - archive.php Remote File Inclusion +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Ncaster 1.7.2 Discovered By : k1n9k0ng Scripts site : http://ncastercms.com/downloads/ncaster172.zip Thanks To : sekuritionline, semprol, mimid,...

Ncaster 1.7.2 - 'archive.php' Remote File Inclusion

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Ncaster 1.7.2 Discovered By : k1n9k0ng Scripts site : http://ncastercms.com/downloads/ncaster172.zip Thanks To : sekuritionline, semprol, mimid, r.i.p, x-code, yogyafree special To : adhietslank,...

Ncaster 1.7.2 (archive.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== Ncaster 1.7.2 archive.php Remote File Inclusion Vulnerability ===============================================================...

CVE-2007-3940

Cross-site scripting XSS vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the svalue parameter in a search action. NOTE: some of these details are obtained from third party information...

CVE-2007-3940

CVE-2007-3940 describes a cross-site scripting (XSS) vulnerability in the QuickerSite 1.7.2 product, specifically in the default.asp page. The flaw allows remote attackers to inject arbitrary web script or HTML via the svalue parameter in a search action. The NVD notes a base score of 4.3 (Medium...

Sql injection

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in 1 top.php and 2 member.php. NOTE: this issue has also been reported to affect 1.7.2...

CVE-2006-2214

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in 1 top.php and 2 member.php. NOTE: this issue has also been reported to affect 1.7.2...

CVE-2006-0411

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

Session fixation

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

CVE-2005-1807

The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service infinite loop leading to memory and CPU consumption via a long header field...