CVE-2006-6461

CVE-2006-6461 affects tr1.php in Yourfreeworld Stylish Text Ads Script. The vulnerability allows remote attackers to obtain the installation path via an invalid id parameter, disclosed in an error message. The entry notes this issue may be related to CVE-2006-2508; the provided documents do not i...

CVE-2006-6461

tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508...

From the IE pop-up ads look at rogue software principles-vulnerability warning-the black bar safety net

A lot of people affected by IE automatically pop-up ads plaguing it, here is a solution ideas, you can get the use of BHO（Browser Helper Objects, browser helper module, making waves of malware. Unfortunately this method is still relatively complex, only the master in use, I hope the master can he...

PT-2006-4402 · Bosclassifieds · Bosclassifieds Classified Ads

Name of the Vulnerable Software and Affected Versions: BosClassifieds Classified Ads affected versions not specified Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to various PHP files, including "index.php", "recent.php",...

CVE-2006-3527

BosClassifieds Classified Ads are affected by PHP remote file inclusion via the insPath parameter in index.php, recent.php, account.php, classified.php, and search.php. The root cause is unsafely including files based on user-controlled insPath, allowing arbitrary PHP code execution. Affected ver...

Sql injection

SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php...

CVE-2006-2508

SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php...

CVE-2006-2508

CVE-2006-2508 describes a SQL injection vulnerability in tr1.php of YourFreeWorld.com Stylish Text Ads Script, allowing remote attackers to execute arbitrary SQL commands via the id parameter, with a potential involvement of advertise.php. The description and metrics indicate a network-exposed vu...

CVE-2006-2508

SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php...

Yourfreeworld Styleish Text Ads Script

Homepage of script http://www.yourfreeworld.com/script/textads.asp Stylish Text Ads Script can be one of the most useful tools for any webmaster. If you own 1 or more websites and want to sell text ads then this tool can be one of the best tool for you. Effected files: tr1.php advertise.php...

[Full-disclosure] CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability CA Vulnerability ID: 34013 CA Advisory Date: 2006-05-02 Discovered By: IBM Global Services Impact: Local attacker can gain escalated privileges. Summary: A potential...

CVE-2006-1786

Cross-site scripting XSS vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via 1 the actionID parameter in ads-readerext and 2 the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses...

CVE-2006-1785

Adobe Document Server for Reader Extensions 6.0 is affected. Remote authenticated users can inject arbitrary web script via a leading ftp/http URI in the ReaderURL variable in the Update Download Site section of ads-readerext, per CVE-2006-1785. The description notes uncertainty about vendor advi...

CVE-2006-1475

CVE-2006-1475 affects Windows XP SP2: Windows Firewall fails to produce application alerts when an executable is launched via NTFS Alternate Data Streams (ADS) filename:stream syntax. Root cause is the ADS filename:stream handling bypassing the normal firewall alert mechanism, enabling a local at...

Command injection

Adobe Graphics Server 2.0 and 2.1 formerly AlterCast and Adobe Document Server ADS 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the 1 saveContent...

AllWeb search SQL inj. vuln.

AllWeb search SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/allweb-search-sql-inj-vuln.html Vendor:http://www.scripts-templates.com affected version: 3.0 and prior Product Description: Want to make money from your site traffic?...

Gator/GAIN Spyware Installed

The remote host has Gator/GAIN Spyware Installed. Gator tracks the sites that users visit and forwards that data back to the company's servers. Gator sells the use of this information to advertisers. It also lets companies launch a pop-up ad when users visit various Web sites. This software is no...

efriends.txt

AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...

CVE-2003-0589

admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password...

diginews.txt

Digi-news and Digi-ads version 1.1 admin access without password .oO Overview Oo. Digi-news and Digi-ads version 1.1 admin access without password Discovered on 2003, March, 30th Vendor: Digi-FX Digi-news 1.1 is a PHP news editor. It allows you to easily add, edit, and delete news. Digi-ad 1.1 is...