2520 matches found
Plogger Beta 2.1 - Administrative Credentials Disclosure
Plogger Beta 2.1 - Administrative Credentials Disclosure !/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "dork: intext:"Powered by Plogger!" -plogger.org\r\n\r\n"; if $argc3 echo "Usage: php ".$argv0." host path OPTIONS\r\n"; echo "host: target server...
Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit
Exploit for unknown platform in category web applications ================================================================= Plogger works with magicquotesgpc = Off\r\n\r\n"; echo "dork: intext:"Powered by Plogger!" -plogger.org\r\n\r\n"; if $argc3 echo "Usage: php ".$argv0." host path...
DSA-987-1 tar - buffer overflow
Bulletin has no description...
Invision Power Board Army System Mod 2.1 - SQL Injection
?php / --------------------------- EXPLOIT --------------------------- Invision Power Board Army System Mod 2.1 SQL Injection Exploit Tested on: Latest version 2.1.0 Discovered on: 06.02.2006 by Alex & fRoGGz Credits to: SecuBox Labs PLEASE READ THIS ! The query of the SQL Injection depends about...
Papoo 2.1.x - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/16573/info Papoo is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecti...
farsiInclusion.txt
Remote File Inclusion in FarsiNews 2.1 and below Credit: The information has been provided by Hamid Ebadi Hamid Network Security Team :[email protected]. The original article can be found at : http://hamid.ir/security Vulnerable Systems: FarsiNews 2.1 Beta 2 and below Vulnerable Code: The following...
Remote file inclusion
PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with registerglobals enabled, allows remote attackers to include arbitrary files via a URL in the cutepath parameter...
Farsinews 2.1 - 'Loginout.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/16440/info FarsiNews is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious P...
PmWiki 2.1 - Multiple Input Validation Vulnerabilities
PmWiki 2.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16421/info PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input. - Arbitrary remote file-include...
PmWiki 2.1 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/16421/info PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input. - Arbitrary remote file-include vulnerability. Exploitation of this issue will result in...
Note-A-Day-2.1.txt
New eVuln Advisory: Note-A-Day Weblog Sensitive Information Disclosure http://evuln.com/vulns/44/summary.html --------------------Summary---------------- Software: Note-A-Day Sowtware's Web Site: http://noteaday.com/ Versions: 2.1 Critical Level: Moderate Type: Sensitive Information Disclosure...
simpleBlogXSS.txt
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Risk: High - Note from the author Simple Blog is a free weblog application intended for personal use. The latest version, 2.1, features xhtml/css template structure, rss feed, blog calendar and an easy to use...
RHEL 2.1 / 3 / 4 : tetex (RHSA-2006:0160)
Updated tetex packages that fix several integer overflows are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input and creates a...
CVE-2006-0243
Cross-site scripting XSS vulnerability in SMBCMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the text parameter, which is used by the "Search Site" field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in SMBCMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the text parameter, which is used by the "Search Site" field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via 1 a comment to comments.asp and 2 possibly certain other fields in unspecified scripts...
CVE-2006-0239
Multiple cross-site scripting XSS vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via 1 a comment to comments.asp and 2 possibly certain other fields in unspecified scripts...
CVE-2006-0239
CVE-2006-0239 describes multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1. An attacker can inject arbitrary script/HTML via (1) a comment to comments.asp and (2) possibly other fields in unspecified scripts. The accessible impact is partial confidentiality and integrity (per ...
CVE-2006-0240
Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts...
CVE-2006-0240
CVE-2006-0240 involves multiple SQL injection vulnerabilities in Simple Blog 2.1 . The flaws allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly other parameters in unspecified scripts. The primary sources consistently descri...