732 matches found
CVE-2006-6650
CVE-2006-6650 affects the mxBB Charts (mx_charts) module, version 1.0.0 and earlier. The vulnerability is a PHP remote file inclusion in charts_constants.php that lets an attacker supply a URL via the module_root_path parameter to execute arbitrary PHP code on the server. This corresponds to a ne...
MXBB Charts Module Module_Root_Path远程文件包含漏洞
mxBB Charts Module是一款基于PHP的WEB应用程序。 mxBB Charts Module不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'chartsconstants.php'脚本对用户提交的'modulerootpath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 mxBB Charts Module 1.0 目前没有详细解决方案提供： http://www.mx-system.com/...
mxBB Module Charts <= 1.0.0 Remote File Inclusion Vulnerability
No description provided by source. Title : mxBB Module Charts = 1.0.0modulerootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com ERROR------------------------------------------------------ .... .. include$modulerootpath . 'language/lang' . $langua...
mxBB Module Charts <= 1.0.0(module_root_path) Remote File Include Vulnerability
Title : mxBB Module Charts = 1.0.0modulerootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com ERROR------------------------------------------------------ .... .. include$modulerootpath . 'language/lang' . $language . '/langcharts.' . $phpEx;...
mxbb module charts 1.0.0 - Remote File Inclusion
Title : mxBB Module Charts = 1.0.0modulerootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com ERROR------------------------------------------------------ .... .. include$modulerootpath . 'language/lang' . $language . '/langcharts.' . $phpEx;...
mxbb module charts 1.0.0 - Remote File Inclusion
mxbb module charts 1.0.0 - Remote File Inclusion Title : mxBB Module Charts = 1.0.0modulerootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com ERROR------------------------------------------------------ .... .. include$modulerootpath...
mxBB Module Charts <= 1.0.0 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =============================================================== mxBB Module Charts = 1.0.0 Remote File Inclusion Vulnerability =============================================================== Title : mxBB Module Charts = 1.0.0modulerootpath...
Microsoft Word Malformed Chart Code Execution Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires that the attacker coerce the target user into opening a malicious .XLS file. The specific flaw exists during the processing of malformed charts embedded within a Wo...
phpBBcharts.txt
// phpBB "charts.php" hack XSS and SQL-Injection // ----------------------------------------------------------------- Advisory by: LoK-Crew - Exploit: http://www.example.com/charts.php?action=vote&rate=1&id=XSS http://www.example.com/charts.php?action=vote&rate=1&id=SQL - Googledork:...
Cross site scripting
Cross-site scripting XSS vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
CVE-2006-2359
Cross-site scripting XSS vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
