23 matches found
EUVD-2005-2951
Malware in sbrugna...
EUVD-2004-1904
Malware in sbrugna...
AzDGDatingLite <= 2.1.3 - Remote Code Execution Exploit
No description provided by source. ?php azdgexpl.php AzDGDatingLite V 2.1.3 possibly prior versions remote code execution with generic http proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference =...
AzDGDatingLite 2.1.1 view.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10084/info Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes hostile HTML and script code...
AzDGDatingLite 2.1.1 index.php language Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10084/info Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes hostile HTML and script code...
CVE-2005-2951
Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" trailing null byte characters in the l parameter, which is used in an includeonce statement...
CVE-2005-2951
Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" trailing null byte characters in the l parameter, which is used in an includeonce statement...
CVE-2005-2951
CVE-2005-2951 affects AzDGDatingLite 2.1.3 (and possibly earlier) with a directory traversal flaw in security.inc.php. The vulnerability allows an attacker to craft the l parameter (using .. and a trailing null byte via %00) that is used in an include_once statement, enabling remote execution of...
CVE-2005-2951: Undefined Security Weakness
Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" trailing null byte characters in the l parameter, which is used in an includeonce statement...
AzDGDatingLite V 2.1.3 remote code execution
AzDGDatingLite V 2.1.3 possibly prior versions remote code execution not yet tested the Platinum version software: site: http://www.azdg.com/ download page: http://www.azdg.com/scripts.php?l=english description:" AzDGDatingLite is a Free dating script working on PHP and MySQL. Multilanguage,...
AzDGDatingLite <= 2.1.3 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ===================================================== AzDGDatingLite = 2.1.3 Remote Code Execution Exploit ===================================================== ?php azdgexpl.php AzDGDatingLite V 2.1.3 possibly prior versions remote code...
AzDGDatingLite 2.1.3 - Remote Code Execution
?php azdgexpl.php AzDGDatingLite V 2.1.3 possibly prior versions remote code execution with generic http proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = on registerglobals = on usage:...
AzDGDatingLite <= 2.1.3 Remote Code Execution Exploit
No description provided by source. ?php azdgexpl.php AzDGDatingLite V 2.1.3 possibly prior versions remote code execution with generic http proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference =...
AzDGDatingLite 2.1.3 - Remote Code Execution
AzDGDatingLite 2.1.3 - Remote Code Execution ?php azdgexpl.php AzDGDatingLite V 2.1.3 possibly prior versions remote code execution with generic http proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script:...
CVE-2004-1911
CVE-2004-1911 concerns an XSS vulnerability in AzDGDatingLite 2.1.1. The issue allows remote attackers to inject arbitrary web script or HTML via (1) l parameter (language) to index.php or (2) id parameter to view.php. The NVD entry cites a base score of 4.3 (Medium) with network attack vector, n...
CVE-2004-1911
Cross-site scripting XSS vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the 1 l parameter aka language variable to index.php or 2 id parameter to view.php...
CVE-2004-1911: Undefined Security Weakness
Cross-site scripting XSS vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the 1 l parameter aka language variable to index.php or 2 id parameter to view.php...
CVE-2004-1911
Cross-site scripting XSS vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the 1 l parameter aka language variable to index.php or 2 id parameter to view.php...
[waraxe-2004-SA#014 - Cross-Site Scripting aka XSS in AzDGDatingLite]
================================================================================ waraxe-2004-SA014 ================================================================================ Cross-Site Scripting aka XSS in AzDGDatingLite...
AzDGDatingLite 2.1.1 - index.php?language Cross-Site Scripting
AzDGDatingLite 2.1.1 - index.php?language Cross-Site Scripting source: https://www.securityfocus.com/bid/10084/info Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes...