1121 matches found
Downstat <= 1.8 (art) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================= Downstat = 1.8 art Remote File Include Vulnerability ======================================================= DESCRIPTION: Remote file include vuln found by sZ sept, 8 2006. SOFTWARE:...
Downstat <= 1.8 (art) Remote File Include Vulnerability
No description provided by source. DESCRIPTION: Remote file include vuln found by sZ sept, 8 2006. SOFTWARE: downstat 1.8 VENDOR URL: http://vmist.net/index.php?script=Downstat DORKs: "Login To Downstat 1.8" allinurl:"/downstat/" NOTES: greetz to: neo-vortex, sk0tie, icez. visit @ irc.bluehell.or...
IDevSpot iSupport 1.8 - open_tickets.php?ticket_id Cross-Site Scripting
IDevSpot iSupport 1.8 - opentickets.php?ticketid Cross-Site Scripting source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow ...
IDevSpot iSupport 1.8 - index.php?cons_page_title Cross-Site Scripting
IDevSpot iSupport 1.8 - index.php?conspagetitle Cross-Site Scripting source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow a...
IDevSpot iSupport 1.8 - 'index.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19964/info IDevSupport iSupport is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other...
IDevSpot iSupport 1.8 - index.php Remote File Inclusion
IDevSpot iSupport 1.8 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19964/info IDevSupport iSupport is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromi...
IDevSpot iSupport 1.8 - 'open_tickets.php?ticket_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to...
IDevSpot iSupport 1.8 - 'rightbar.php?suser' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to...
CVE-2006-4260
Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. dot dot in the path parameter...
CVE-2006-4260
Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. dot dot in the path parameter...
CVE-2006-4260
Fotopholder 1.8 is affected by a directory traversal in index.php, allowing remote attackers to read arbitrary directories or files via a .. in the path parameter. The root cause is insufficient sanitization/verification of the path input. Impact is partial confidentiality (read access only). No ...
CVE-2006-4259
Fotopholder 1.8 contains a cross-site scripting (XSS) flaw in index.php that allows an attacker to inject arbitrary script or HTML via the path parameter. The vulnerability is noted as potentially stemming from a directory traversal issue. Affected software: Fotopholder 1.8 (index.php). Consequen...
CVE-2006-4259
Cross-site scripting XSS vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from a directory traversal vulnerability...
otopholder 1.8 suffers from a local file inclusion,XSS and directory listing vuln
vendor: http://www.jakeo.com vuln : http://host/foto/index.php?path=../../etc/passwd http://host/foto/index.php?path=bxss/b http://host/foto/index.php?path=../../directory listing Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team...
CVE-2006-3847
CVE-2006-3847: PHP remote file inclusion in MoSpray (aka com_mospray) 1.8 RC1. The vulnerability affects basedir handling in multiple scripts (admin.php, and possibly details.php, modify.php, newgroup.php, newtask.php, rss.php), allowing an attacker to cause arbitrary PHP code execution via a URL...
CVE-2006-3847
PHP remote file inclusion vulnerability in 1 admin.php, and possibly 2 details.php, 3 modify.php, 4 newgroup.php, 5 newtask.php, and 6 rss.php, in MoSpray aka commospray 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...
CVE-2006-2280
CVE-2006-2280 affects openEngine 1.8 Beta 2 and earlier. A directory traversal in website.php allows remote attackers to list arbitrary directories and read files via a .. in the template parameter. CVSS v2 base score 5.0 (Medium): AV:N/AC:L/Au:N/C:P/I:N/A:N. Exploitation details and patch inform...
Cross site scripting
Cross-site scripting XSS vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is...
CVE-2006-1894
CVE-2006-1894 affects RevoBoard 1.8 (derived from PunBB). The vulnerability is a cross-site scripting (XSS) flaw in the email address obfuscator: a substitution cipher used for the email tag can be reversed to reveal injected script/HTML, enabling remote code execution in the user’s browser. Affe...
CVE-2006-1894
Cross-site scripting XSS vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is...