996 matches found
rezervi27-rfi.txt
------=Part10021926781377.1177148481272 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline App: Rezervi Availability 2.7 Source: http://www.rezervi.com/www/german/download/rezerviV27.zip Author: Arham Muhammad Vulnerable File:...
[SECURITY] [DSA 1275-1] New zope2.7 packages fix cross-site scripting flaw
------------------------------------------------------------------------ Debian Security Advisory DSA-1275-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 02, 2007 - ------------------------------------------------------------------------ Package : zope2.7 Vulnerability...
Woltlab Burning Board UserGroups.PHP SQL注入漏洞
Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'UserGroups.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Woltlab Burning Board 2.7 Woltlab Burning Board 2.6 Woltlab Burning Board 2.5 Woltlab Burning Board 2.4 Woltlab Burning...
MySQL Commander <= 2.7 (home) Remote File Inclusion Vulnerability
No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV73$2007 ----------------------------------------------------------------------------------------- ECHOADV73$2007 MySQL Commander = 2.7 home Remote File Inclusion Vulnerability...
CVE-2007-1439
PHP remote file inclusion vulnerability in ressourcen/dbopen.php in bitesser MySQL Commander 2.7 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the home parameter...
CVE-2007-0610
CVE-2007-0610 affects CMSimple 2.7 fix1 in the mailform component. The vulnerability is a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the sender parameter. The available documentation attributes the issue to the mailform feature, and the...
CVE-2007-0551
CMSimple 2.7 is affected by CVE-2007-0551 via multiple PHP remote file inclusion vulnerabilities in cms.php, allowing an attacker to execute arbitrary PHP code through the pth[file][config] or pth[file][image] parameters. The issue stems from including user-supplied URLs, enabling code execution ...
CVE-2007-0551
Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pthfileconfig and 2 pthfileimage parameters...
CVE-2007-0304
SQL injection vulnerability in duyuru.asp in MiNT Haber Sistemi 2.7 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-0304
The connected sources confirm a SQL injection vulnerability in MiNT Haber Sistemi 2.7 affecting duyuru.asp, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. Root cause is improper handling of user input in the SQL query within that script. The vulnerability ma...
CVE-2006-6879
Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated users to upload arbitrary PHP scripts to the gfx/ and files/ directories via the userfile parameter...
CVE-2006-6861
CVE-2006-6861: Outfront Spooky Login 2.7 contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL via (1) UserUpdate in login/register.asp or (2) unspecified parameters in includes/a_register.asp. No remediation details are provided in the connected documents.
CVE-2006-6862
CVE-2006-6862 documents multiple cross-site scripting (XSS) vulnerabilities in the Web app Outfront Spooky Login 2.7 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to two pages: login/login.asp and login/register.asp . The core vulnerability ...
CVE-2006-6879
Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated users to upload arbitrary PHP scripts to the gfx/ and files/ directories via the userfile parameter...
Spooky 2.7 - 'login/register.asp' SQL Injection
source: https://www.securityfocus.com/bid/21822/info Spooky Login is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities...
CVE-2006-6770
Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter in 1 popup.php, 2 rss.php, 3 ajaxrequest.php, and 4 mediabroadcast.php...
PHP-Update 2.7 - adminuploads.php Remote Code Execution
PHP-Update 2.7 - adminuploads.php Remote Code Execution !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author =...
PHP-Update 2.7 - '/admin/uploads.php' Remote Code Execution
!/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author = "undefined1"; my $date = "2006-10-21"; my $settings = "none...
PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== PHP-Update = 2.7 admin/uploads.php Remote Code Execution Exploit =================================================================== !/usr/bin/perl rgod u fucking little...