CVE-2006-5634

CVE-2006-5634 is associated with PHP remote file inclusion in phpProfiles. Connected records document additional PHP RFI vulnerabilities in phpProfiles 3.1.2b and earlier, with multiple vectors across include/body.inc.php, body_admin.inc.php, menu files, and various incpath parameters. The core i...

phpProfiles 2.1 Beta Multiple Remote File Include Vulnerabilities

No description provided by source. ================================================================== phpProfiles RFI ================================================================== Info:- Scripts: phpProfiles download : http://sourceforge.net/project/showfiles.php?groupid=176310 Version : v.2...

CVE-2006-5609

Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "../" sequences in the dir parameter...

CVE-2006-5609

CVE-2006-5609 describes a directory traversal vulnerability in TorrentFlux 2.1’s dir.php that allows remote attackers to list arbitrary directories by using ".../" sequences in the dir parameter. Based on connected documents, the issue is linked to TorrentFlux 2.1 (and related notes to 2.2 varian...

CVE-2006-5609

Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "../" sequences in the dir parameter...

phpProfiles 2.1 Beta - Multiple Remote File Inclusions

phpProfiles 2.1 Beta - Multiple Remote File Inclusions ================================================================== phpProfiles RFI ================================================================== Info:- Scripts: phpProfiles download :...

TorrentFlux2.1.txt

Dorkfire.com Security Advisory Discovered By: [email protected] Type of problem: Directory Traversal Software: TorrentFlux 2.1 Software Description: TorrentFlux is a FREE PHP based Torrent client that runs on a web server. Manage all of your Torrent downloads through a convenient web interface...

TorrentFlux 2.1 - dir.php Directory Traversal

TorrentFlux 2.1 - dir.php Directory Traversal source: https://www.securityfocus.com/bid/20771/info TorrentFlux is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary...

TorrentFlux 2.1 - 'dir.php' Directory Traversal

source: https://www.securityfocus.com/bid/20771/info TorrentFlux is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context...

CVE-2006-5451

Multiple cross-site scripting XSS vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 action, 2 file, and 3 users array variables in a admin.php, which are not properly handled when the administrator views the Activity Log; and the 4 torrent...

CVE-2006-5451

Multiple cross-site scripting XSS vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 action, 2 file, and 3 users array variables in a admin.php, which are not properly handled when the administrator views the Activity Log; and the 4 torrent...

CVE-2006-5451

CVE-2006-5451 describes multiple XSS flaws in TorrentFlux 2.1. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via: (1) admin.php parameters (action, file, users array) when viewing the Activity Log, and (2) startpop.php torrent parameter used by displayName. The vector...

TorrentFlux ?user_id? Script Insertion

TITLE: TorrentFlux ?userid? Script Insertion CRITICAL: Not Critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: TorrentFlux 2.x DESCRIPTION: I have discovered a vulnerability in TorrentFlux, which can be exploited by malicious users to conduct script insertion attacks. Data passed t...

CVE-2006-5303

Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading 1 base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and 2 plaintext data in SERVERS\Shared\signers.cfg. NOTE: the...

CVE-2006-5253

CVE-2006-5253 affects Dayana Networks phpOnline (aka PHP-Online) 2.1. The vulnerability is a PHP remote file inclusion in strload.php via a URL in the LangFile parameter, allowing an attacker to execute arbitrary PHP code. Reported impact aligns with CVSS 2.0: partial impact on confidentiality, i...

CVE-2006-5253

PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline aka PHP-Online 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the LangFile parameter...

Jinzora <= 2.1 Remote File Inclusion

Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending. requireonce$includepath. 'backend/classes.php'; exmple and...

CVE-2006-5227

Cross-site scripting XSS vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the $useragent variable, probably obtained from the User-Agent HTTP header, and possibly 2 the $ipresolved variable...

CVE-2006-5227

Cross-site scripting XSS vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the $useragent variable, probably obtained from the User-Agent HTTP header, and possibly 2 the $ipresolved variable...

CVE-2006-5227

CVE-2006-5227 describes a cross-site scripting (XSS) vulnerability in TorrentFlux 2.1, specifically in admin.php, where an attacker can inject arbitrary script or HTML via the $user_agent value (likely from the User-Agent header) and possibly the $ip_resolved variable. The connected sources reaff...