Cross site scripting

Cross-site scripting XSS vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

CVE-2010-4350

Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

CVE-2010-4349

admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid dbtype parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

Design/Logic Flaw

admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid dbtype parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

CVE-2010-4350

Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

CVE-2010-4348

Cross-site scripting XSS vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

CVE-2010-4350

CVE-2010-4350 affects MantisBT prior to 1.2.4 and is a directory traversal flaw in admin/upgrade_unattended.php that allows remote inclusion of local files via db_type, due to unsafe ADOdb usage. Impact per CVSS: partial disclosure/integrity/availability (base 5.1, MEDIUM). Gentoo/OpenVAS advisor...

CVE-2010-4349

CVE-2010-4349 affects MantisBT prior to 1.2.4. The issue lies in admin/upgrade_unattended.php, where an invalid db_type parameter triggers an error message that reveals installation path, due to an unsafe call in the ADOdb Library for PHP. This enables a remote attacker to obtain sensitive inform...

CVE-2010-4348

CVE-2010-4348 affects MantisBT prior to 1.2.4. It is a cross-site scripting (XSS) vulnerability in admin/upgrade_unattended.php where an attacker can inject arbitrary web script or HTML via the db_type parameter, due to an unsafe call in the ADOdb PHP library. The issue enables remote attacker co...

EUVD-2010-4319

Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

Kisisel Radyo Script - Multiple Vulnerabilities

Exploit for php platform in category web applications =============================================== Kisisel Radyo Script - Multiple Vulnerabilities =============================================== Author: FuRty Contact : email protected Thanks: RedGuard, KnocKout, TrSniper and all Justic3 Group...

Free PHP Photo Gallery Script Remote File Inclusion

Exploit Title: Free PHP photo gallery script Remote File inclusion Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://phpweby.com/downloads/gallery Tested on:...

Free PHP Photo Gallery Script Command Execution

Exploit Title: Free PHP photo gallery script Remote Command Execution Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://phpweby.com/downloads/gallery Tested o...

Free PHP Photo Gallery Script - Remote File Inclusion

Exploit Title: Free PHP photo gallery script Remote File inclusion Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://phpweby.com/downloads/gallery Tested on:...

Free PHP Photo Gallery Script - Remote File Inclusion

Free PHP Photo Gallery Script - Remote File Inclusion Exploit Title: Free PHP photo gallery script Remote File inclusion Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download...

Free PHP photo Gallery script - Remote Command Execution

Free PHP photo Gallery script - Remote Command Execution Exploit Title: Free PHP photo gallery script Remote Command Execution Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org...

Free PHP photo Gallery script - Remote Command Execution

Exploit Title: Free PHP photo gallery script Remote Command Execution Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://phpweby.com/downloads/gallery Tested o...

Free PHP photo gallery script Remote Command Execution Vulnerability

Exploit for php platform in category web applications ==================================================================== Free PHP photo gallery script Remote Command Execution Vulnerability ==================================================================== Date: 2010/07/21 Author: ViRuS Qalaa...

Gallery v2.3 RFI Vulnerability

Exploit for unknown platform in category web applications ============================== Gallery v2.3 RFI Vulnerability ============================== ======================================================================================== | Title : Gallery V 2.3 RFI Vulnerability | | Author :...

efront 3.5.4 - 'database.php?path' Remote File Inclusion

efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15 requireonce$path.'adodb/adodb.inc.php'; 3xplo!t :...