Advanced Guestbook 2.3.1 (Admin.php) Remote File Include

Advanced Guestbook 2.3.1 Admin.php Remote File Include Author: BrokeN-ProXy Script : admin.php Found : www.hotscripts.com Risk : Dangerous Dork : "powered by: Advanced Guestbook 2.3.1" Exploit: www.Site.com/AGuest Path/admin.php?includepath=Shell?cmd Notice: AGuest Path may be more than One, You...

XSS vulnerability in Blojsom

I. BACKGROUND Taken from the Blojsom Website : "Blojsom is a Java-based, full-featured, multi-blog, multi-user software package that was inspired by blosxom. blojsom aims to retain a simplicity in design while adding flexibility in areas such as the flavors, templating, plugins, and the ability t...

Yappa-ng 2.3.1 - 'admin_modules' Remote File Inclusion

============================================================================================== yappa-ng = v2.3.1 adminmodules Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

Kayako eSupport <= 2.3.1 (subd) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== Kayako eSupport Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noob...

Kayako eSupport &lt;= 2.3.1 (subd) Remote File Inclusion Vulnerability

No description provided by source. Script: Kayako eSupport = 2.3.1 Vendor: Kayako www.kayako.com Discovered: beford xbefordx gmail com Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noobs...

CVE-2006-3148

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...

Advanced Guestbook 2.3.1 /index.PHP/ SQL Injection

Advanced Guestbook 2.3.1 /index.PHP/ SQL Injection Credit : SpC-x | The-BeKiR Site : http://wWw.SaVSaK.CoM Greetz : | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Code : http://www.target.com/path/index.php?entry=SQL Example : http://www.nascarstation.de/phpguest/index.php?entry=SQL /SpC-x -- G...

CVE-2003-1278

CVE-2003-1278 is an XSS vulnerability in OpenTopic 2.3.1 that allows remote attackers to inject arbitrary HTML/script into IMG tags, enabling execution of scripts as other users and potential cookie theft. Public descriptions from NVD and Red Hat state the issue as a cross-site scripting flaw aff...

CVE-2003-1278

Cross-site scripting vulnerability XSS in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into IMG tags...

QuiXplorer < 2.3.1 Directory Traversal Vulnerability

QuiXplorer is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sql injection in jPortal version 2.3.1 &#40;module download&#41;

Versions: all from 2.2.1 to 2.3.1+Service Pack+shop jportalI check this bug only on one site SQL injection attack if magicquotesqpc=Off Problem is in file serching engine download.php, witch code is in “module/down.inc.php” file: code if$cat=='all' $q = "AND title LIKE '$word'"; else $q = "AND...

CVE-2005-3052

SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php...

jPortalSQL.txt

Versions: all from 2.2.1 to 2.3.1+Service Pack+shop jportalI check this bug only on one site SQL injection attack if magicquotesqpc=Off Problem is in file serching engine download.php, witch code is in “module/down.inc.php” file: if$cat=='all' $q = "AND title LIKE '%$word%'"; else $q = "AND...

CVE-2005-3052

SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php...

CVE-2005-3052

CVE-2005-3052 affects jPortal 2.3.1, where the vulnerability in module/down.inc.php allows remote attackers to execute arbitrary SQL commands via the search field to download.php. Documented details state SQL injection with a CVSSv2 base score of 7.5 (HIGH). Exploitation specifics are not provide...

CVE-2005-1548

CVE-2005-1548 is an SQL injection vulnerability in the index.php of Advanced Guestbook 2.3.1 . The flaw occurs in the entry parameter , allowing remote attackers to execute arbitrary SQL commands. The underlying issue is an input validation flaw that fails to sanitize user input before database i...

CVE-2005-1548

SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter...

Advanced Guestbook 2.3.1

There is an SQL Injection in Advanced Guestbook 2.3.1 For Example: http://www.yourdomain.com/yourguestbookdirectory/index.php?entry=' or http://www.yourdomain.com/yourguestbookdirectory/index.php?entry=27 Yours, SpyHat...

CVE-2005-1285

CVE-2005-1285 affects WoltLab Burning Board (thread.php) and earlier 2.3.1, where an XSS flaw can be exploited via the hilight parameter to inject script/HTML. The vulnerability is rooted in insufficient input sanitization for hilight in thread.php. CVSS info from NVD shows a medium severity (3.0...

jportal231.txt

Hello BugTraq, I've found possibility to inject sql code in jPortal version 2.3.1, in module "banner" module/banner.inc.php. Bug is in these lines of code: code $query = "SELECT FROM $bannatbl WHERE title='$haslo' ORDER BY id DESC"; /code - line 192. There is unfiltered variable $haslo. In order ...