Host Directory PRO 2.1.0 - Remote Change Admin Password

Host Directory PRO 2.1.0 - Remote Change Admin Password change password Host Directory PRO 2.1.0 Configuration Web Interface Password Admin Email Receive Authorize.Net On Off Authorize login Authorize transactionKey /fo...

Yellow Duck Weblog 2.1.0 (lang) Local File Inclusion Vulnerability

No description provided by source. =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::Yellow Duck Weblog ------------------------------------------------- Author: ahmadbady =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- downloa...

Bo-blogV2.1.0 跨站漏洞

文件\inc\realplay.php 这个小bug有点搞笑 ?php echo getmagicquotesgpc ? stripslashes$GET'link' : $GET'link'; ? Bo-blog V2.1.0 暂无 !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import requests ''' 原始利用链接：...

NextApp Echo XML Injection

SEC Consult Security Advisory ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 me...

WebSVN Script Multiple Vulnerabilities

This host is running WebSVN and is prone to Multiple Vulnerabilities. Vulnerability: Multiple flaws are due to, - input passed in the URL to index.php is not properly sanitised before being returned to the user. - input passed to the rev parameter in rss.php is not properly sanitised before being...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the relpath parameter...

Sql injection

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a Search action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4205

CVE-2008-4205 concerns SQL injection in Attachmax Dolphin

CVE-2008-4206

CVE-2008-4206 is a PHP remote file inclusion vulnerability affecting Attachmax Dolphin 2.1.0 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL in the rel_path parameter to config.php. The public records confirm the vulnerability and its im...

CVE-2008-4207

CVE-2008-4207 affects Attachmax Dolphin 2.1.0 and earlier. The vulnerability is an information disclosure where an improperly protected info.php in the main folder can be accessed via a direct request that invokes the phpinfo function, allowing remote attackers to obtain sensitive information. Th...

CVE-2008-4207

Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information...

[ECHO_ADV_101$2008] Attachmax Dolphin <= 2.1.0 Multiple Vulnerabilities

ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : September, 16 ...

CVE-2008-1857

CVE-2008-1857 affects Make our Life Easy (Mole) 2.1.0, specifically the web component viewsource.php. The vulnerability arises in the dirn and fname parameters, enabling remote attackers to perform directory traversal and read arbitrary files. Connections from the documents indicate the issue is ...

Mole 2.1.0 (viewsource.php) Remote File Disclosure Vulnerability

No description provided by source. Mole v2.1.0 viewsource.php Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/showfiles.php?groupid=164171 Vuln Code : html head titleMole: Template viewer/title meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /he...

Mole 2.1.0 - viewsource.php Remote File Disclosure

Mole 2.1.0 - viewsource.php Remote File Disclosure Mole v2.1.0 viewsource.php Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/showfiles.php?groupid=164171 Vuln Code : Mole: Template viewer POC : /mole210/viewsource.php?dirn=include/config.inc.php...

Mole 2.1.0 - 'viewsource.php' Remote File Disclosure

Mole v2.1.0 viewsource.php Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/showfiles.php?groupid=164171 Vuln Code : Mole: Template viewer POC : /mole210/viewsource.php?dirn=include/config.inc.php /mole210/viewsource.php?fname=include/config.inc.php...

CVE-2007-6162

Cross-site scripting XSS vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a category action...

CVE-2007-6162

CVE-2007-6162 affects FMDeluxe 2.1.0 and is caused by an XSS vulnerability in index.php where the id parameter used by a category action can inject arbitrary script/HTML. The vulnerability allows remote attackers to execute script in the victim’s browser; exploitation details are not provided in ...

FMDeluxe 2.1 - index.php Cross-Site Scripting

FMDeluxe 2.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26587/info FMDeluxe is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows an attacker to execute arbitrary HTML or script...

eXtremail 2.1.1 - DNS Parsing Bugs Remote (PoC)

/ extremail-v9.c Copyright c 2007 by eXtremail include include include include include define DNSHDRLEN 12 define DNSTRAILLEN 20 define DNSPORT 53 define DNSMAXMSG 0x200 define HAMMERLEN 284 static char dnshdrbuf = "\x69\x69" / transaction id / "\x81\x80" / flags / "\x00\x01" / questions /...