441 matches found
CVE-2010-4867
Directory traversal vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bn parameter...
Directory traversal
Directory traversal vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bn parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter...
CVE-2010-4868
Cross-site scripting XSS vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter...
CVE-2010-4868
CVE-2010-4868 affects W-Agora (4.2.1 and earlier), with a cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) exploitable via the bn parameter. OpenVAS notes also a local file-inclusion path, both arising from improper input sanitization. Impact described as arbitrary script/...
CVE-2010-4867
The CVE-2010-4867 entry affects W-Agora 4.2.1 and earlier. Affected component: search.php3 (aka search.php). Root cause: directory traversal via the bn parameter ( bn in URL ), allowing an attacker to include and execute local files. Consequence: remote arbitrary local file inclusion, with potent...
w-Agora Forum 4.2.1 - Arbitrary File Upload
?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Site ........................: http://treasuresec.com...
w-Agora Forum 4.2.1 Shell Upload
?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Site ........................: http://treasuresec.com...
w-Agora Forum 4.2.1 Arbitrary File Upload Exploit
Exploit for php platform in category web applications ?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Si...
w-Agora Forum 4.2.1 - Arbitrary File Upload
w-Agora Forum 4.2.1 - Arbitrary File Upload ?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Site...
LFI, IAA, XSS и FPD уязвимости в W-Agora
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Local File Inclusion, Insufficient Anti-automation, Cross-Site Scripting и Full path disclosure уязвимостях в W-Agora. Local File Inclusion WASC-31: http://site/register.php?bn=1 в папке conf http://site/register.php?bn=..1 в любой папке - только ...
W-Agora 4.2.1 Cross Site Scripting / Local File Inclusion
Hello list! I want to warn you about Cross-Site Scripting, Local File Inclusion and Brute Force vulnerabilities in W-Agora. SecurityVulns ID: 11499. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous versions. ---------- Details:...
XSS, LFI и BT уязвимости в W-Agora
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Local File Inclusion и Brute Force уязвимостях в W-Agora. XSS WASC-08: http://site/current/getfile.php/supporthowto/223E3Cbody20onload=alertdocument.cookie3E/1/ Local File Inclusion WASC-31: В папке conf:...
W-Agora 4.2.1 Cross Site Scripting / Denial Of Service / SQL Injection
Hello Packet Storm! I want to warn you about Cross-Site Scripting, SQL DB Structure Extraction, SQL Injection and Denial of Service vulnerabilities in W-Agora. SecurityVulns ID: 11324. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous...
Многочисленные уязвимости в W-Agora
Здравствуйте 3APA3A! Сообщаю вам о найденных мною многочисленных Cross-Site Scripting, SQL DB Structure Extraction, SQL Injection и Denial of Service уязвимостях в W-Agora. XSS WASC-08:...
Новые уязвимости в W-Agora
Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting и Local File Inclusion уязвимостях в W-Agora. XSS WASC-08: http://site/news/for-print.php3?bn=x&key=12828507193Cscript3Ealertdocument.cookie3C/script3E...
W-Agora 4.2.1 Cross Site Scripting / Local File Inclusion
Hello Full-Disclosure! I want to warn you about new Cross-Site Scripting and Local File Inclusion vulnerabilities in W-Agora. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous versions. ---------- Details: ---------- XSS WASC-08:...
W-Agora 4.1.5 - Local File Inclusion Cross-Site Scripting
W-Agora 4.1.5 - Local File Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/44507/info W-Agora is prone to multiple local file-include vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker c...
W-Agora 4.1.5 - Local File Inclusion / Cross-Site Scripting
source: https://www.securityfocus.com/bid/44507/info W-Agora is prone to multiple local file-include vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to view and execute local...
w-Agora 'search.php' Local File Include and Cross Site Scripting Vulnerabilities
w-Agora is prone to a local file-include vulnerability and a cross- site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...