47 matches found
CVE-2008-6089
Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a download action...
CVE-2008-6089
creationtimestamp| type| source ---|---|--- 2008-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6715...
CVE-2007-6089
CVE-2007-6089 affects meBiblio 0.4.5. The vulnerability is a PHP remote file inclusion in index.php, allowing an attacker to execute arbitrary PHP code via the action parameter. Root cause appears to be unsafe handling of a user-supplied URL in a file-inclusion operation. Affected component: inde...
Unfixed XSS vulnerability at directory.webhosting.info
Security researcher St@rExT, has submitted on 20/04/2007 a cross-site-scripting XSS vulnerability affecting directory.webhosting.info, which at the time of submission ranked 6089 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/04/2007. It is...
CVE-2006-6089
Multiple cross-site scripting XSS vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the 1 title Subject, 2 groupname Group Name, or 3 detail Message field...