2306 matches found
CVE-2007-2947
Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the rootprefix parameter to 1 index.php, 2 emailsubscribe.php, 3 download.php, or 4 development.php...
OpenBASE 0.6a - root_prefix Remote File Inclusion
OpenBASE 0.6a - rootprefix Remote File Inclusion DeltaSecurityTEAM WwW.DeltaSecurity.iR Portal Name = OpenBASE Alpha 0.6 Class = Remote File Inclusion Risk = High Remote File Execution Download = Http://openbase.sourceforge.net Discoverd By = DeltahackingTEAM User In Delta Team = Dav00dCracker...
OpenBASE 0.6a (root_prefix) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= OpenBASE 0.6a rootprefix Remote File Inclusion Vulnerabilities ================================================================= DeltaSecurityTEAM Portal Name = OpenBASE Alp...
[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability
------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...
Remote file inclusion
PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the systemsmartydir parameter...
CVE-2007-2608
CVE-2007-2608 is a PHP remote file inclusion vulnerability in Miplex2 Alpha 1. The flaw resides in lib/smarty/SmartyFU.class.php, allowing an attacker to execute arbitrary PHP code via a URL in the system[smarty][dir] parameter. CVSS2 base score 7.5 (HIGH) with network attack vector and low attac...
CVE-2007-2608
PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the systemsmartydir parameter...
CVE-2007-2503
PHP Turbulence 0.0.1 alpha is affected by a directory-traversal in turbulence.php via GLOBALS[tcore], allowing potential local file inclusion/execution. The issue stems from using a dot-dot path, with a note that a direct request to user/turbulence.php may trigger a fatal error before inclusion. ...
PT-2007-3828 · Php · Php Turbulence
Name of the Vulnerable Software and Affected Versions: PHP Turbulence version 0.0.1 alpha Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALStcore parameter in the user/turbulence.php file. However, this vulnerability is disputed because a direct...
PT-2007-3827 · Php · Php Turbulence
Name of the Vulnerable Software and Affected Versions: PHP Turbulence version 0.0.1 alpha Description: A directory traversal issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALStcore parameter. This issue is disputed due to a fatal error...
CVE-2007-2265
CVE-2007-2265 is an XSS vulnerability in YA Book 0.98-alpha, exploitable through the City field in a sign action in index.php. The available documents indicate remote script/HTML injection leading to partial confidentiality/integrity/availability impact as described by CVSS metrics, but no patch ...
CVE-2007-2265
Cross-site scripting XSS vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php...
YA Book Persistent XSS Bug
. . . . | . .| . .;/ || .| .net | .| "YA Book 0.98-alpha - Persistent XSS Vulnerability" by Omni 1 Infos --------- Date : 2007-04-23 Product : YA Book Version : 0.98-alpha - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/yabook - http://www.phpee.com/ Vendor Status ...
NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities
NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities Vulnerable: NuclearBB Alpha 1 Google d0rk: "This forum is powered by NuclearBB" ============= String Inputs ============= ---------------------------- login.php - $POST'submit' ---------------------------- username=xyz...
PHP Turbulence 0.0.1 - Turbulence.php Remote File Inclusion
PHP Turbulence 0.0.1 - Turbulence.php Remote File Inclusion source: https://www.securityfocus.com/bid/23580/info PHP Turbulence is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise t...
PHP Turbulence 0.0.1 - 'Turbulence.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/23580/info PHP Turbulence is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...
nuclearbb-sql.txt
NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities Vulnerable: NuclearBB Alpha 1 Google d0rk: "This forum is powered by NuclearBB" ============= String Inputs ============= ---------------------------- login.php - $POST'submit' ---------------------------- username=xyz...
Unfixed XSS vulnerability at www.alphaomegahosting.com
Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting www.alphaomegahosting.com, which at the time of submission ranked 962622 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is...
[SECURITY] [DSA 1274-1] New file packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1274-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 02, 2007 - ------------------------------------------------------------------------ Package : file Vulnerability :...