2611 matches found
PHP-Nuke addon Nuke Mobile Entartainment LFI Vulnerability
Exploit for unknown platform in category web applications ========================================================== PHP-Nuke addon Nuke Mobile Entartainment LFI Vulnerability ========================================================== Nuke Mobile Entartainment AsbMay's Group ... Vuln. Code :...
CVE-2007-4581
SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...
Sql injection
SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...
CVE-2007-4581
SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...
CVE-2007-4581
CVE-2007-4581 affects WBB2-Addon: Acrotxt 1.0, where acrotxt.php exposes the show parameter to SQL injection. The vulnerability allows remote attackers to execute arbitrary SQL commands through the show parameter, enabling partial confidentiality and integrity impact as per CVSS 2.0 (AV:N/AC:L/Au...
CVE-2007-4581: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...
WBB2-Addon: Acrotxt v1 (show) Remote SQL Injection Vulnerability
No description provided by source. Title: WBB2-Addon: Acrotxt v1 show Remote SQL Injection Bug by: D4m14n 11/07/2007 Page: www.damians-world.dl.am // www.team-internet.dl.am Dork: inurl:acrotxt.php wbb SQL-Injection: http://target/path/acrotxt.php?show=SQL Example:...
WBB2-Addon: Acrotxt 1.0 - show SQL Injection
WBB2-Addon: Acrotxt 1.0 - show SQL Injection Title: WBB2-Addon: Acrotxt v1 show Remote SQL Injection Bug by: D4m14n 11/07/2007 Page: www.damians-world.dl.am // www.team-internet.dl.am Dork: inurl:acrotxt.php wbb SQL-Injection: http://target/path/acrotxt.php?show=SQL Example:...
WBB2-Addon: Acrotxt v1 (show) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ WBB2-Addon: Acrotxt v1 show Remote SQL Injection Vulnerability ================================================================ Title: WBB2-Addon: Acrotxt v1 show Remote SQL...
Mozilla Firefox Bootstrapped Addon Social Engineering Code Execution
Mozilla Firefox before version 41 allowed users to install unsigned browser extensions from arbitrary web servers. This module dynamically creates an unsigned .xpi addon file. The resulting bootstrapped Firefox addon is presented to the victim via a web page. The victim's Firefox browser will pop...
Mozilla Fizzle addon crossite access
No description provided...
Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Coppermine Photo Gallery = 1.2.2b Nuke Addon Include Vulnerability =====================================================================...
Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for PHPNUKE THEMEDIR Remote File...
CVE-2006-3751: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component comhtmlarea3xtd-c for ImageManager 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...
CVE-2006-0927
Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...
CVE-2006-0927
CVE-2006-0927 describes multiple XSS vulnerabilities in the JGS-XA/JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x. The issue arises in the parameters (1) userid of jgs_galerie_slideshow.php and jgs_galerie_scroll.php, and (2) katid of jgs_galerie_slideshow.php, allowing r...
CVE-2006-0927: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...
CVE-2005-4094
connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script...
USN-149-1: Firefox vulnerabilities
Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious web site to spoof the contents of other web sites. CAN-2005-1937 In several places the browser user interface did not...