itech-multi.txt

Title : ITech Classifieds Multiple Remote Vulnerabilities Author : CrackersChild Bug : SQL Injection + XSS Demo : http://itechclassifieds.com/demo/ Exp : /ViewCat.php?CatID=Alertdocument.cookie Exp : /ViewCat.php?CatID=SQL Injection / Greetz : www.aq.com www.sibersavascilar.com www.biyofrm.com...

ITech Classifieds Multiple Remote Vulnerabilities

Title : ITech Classifieds Multiple Remote Vulnerabilities Author : CrackersChild Bug : SQL Injection + XSS Demo : http://itechclassifieds.com/demo/ Exp : /ViewCat.php?CatID=scriptAlertdocument.cookie/script Exp : /ViewCat.php?CatID=SQL Injection / Greetz : www.aq.com www.sibersavascilar.com...

CVE-2008-0137

PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathescape parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathescape parameter...

CVE-2008-0137

The CVE-2008-0137 entry describes a PHP remote file inclusion in SNETWORKS PHP CLASSIFIEDS 5.0. The vulnerability arises from the config.inc.php handling of the path_escape parameter, which allows an attacker to supply a URL and cause arbitrary PHP code execution on the server. The affected compo...

snetworks-rfi.txt

+By CrackersChild+ Script.......: SNETWORKS PHP CLASSIFIEDS Page.........: http://www.snetworks.biz/ Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File İnclude Vulnerability Demo.........: http://xxxclassifieds.com/classifieds/...

SNETWORKS PHP CLASSIFIEDS 5.0 Remote File Inclusion Vulnerability

No description provided by source. +By CrackersChild+ Script.......: SNETWORKS PHP CLASSIFIEDS Page.........: http://www.snetworks.biz/ Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File nclude Vulnerability Demo.........:...

SNETWORKS PHP CLASSIFIEDS 5.0 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= SNETWORKS PHP CLASSIFIEDS 5.0 Remote File Inclusion Vulnerability ================================================================= +By CrackersChild+ Script.......: SNETWOR...

snetworks PHP Classifieds 5.0 - Remote File Inclusion

snetworks PHP Classifieds 5.0 - Remote File Inclusion +By CrackersChild+ Script.......: SNETWORKS PHP CLASSIFIEDS Page.........: http://www.snetworks.biz/ Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File Ä°nclude Vulnerability...

snetworks PHP Classifieds 5.0 - Remote File Inclusion

+By CrackersChild+ Script.......: SNETWORKS PHP CLASSIFIEDS Page.........: http://www.snetworks.biz/ Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File Ä°nclude Vulnerability Demo.........: http://xxxclassifieds.com/classifieds/...

XZeroScripts XZero Community Classifieds 本地文件包含漏洞

BUGTRAQ ID: 27041 CNCAN ID:CNCAN-2007122808 XZeroScripts XZero Community Classifieds是一款基于PHP的WEB应用程序。 XZeroScripts XZero Community Classifieds不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于脚本对用户提交的WEB参数缺少过滤，提交包含多个\"../\"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 XZeroScripts XZero Community...

XZeroScripts XZero Community Classifieds 'config.inc.php'远程文件包含漏洞

BUGTRAQ ID: 27040 CNCAN ID:CNCAN-2007122806 XZeroScripts XZero Community Classifieds是一款基于PHP的WEB应用程序。 XZeroScripts XZero Community Classifieds不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'config.inc.php'脚本对用户提交的'pathescape'参数缺少过滤，提交远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 XZeroScripts XZero...

XZeroScripts XZero Community Classifieds SQL注入漏洞

BUGTRAQ ID: 27042 CNCAN ID:CNCAN-2007122807 XZeroScripts XZero Community Classifieds是一款基于PHP的WEB应用程序。 XZeroScripts XZero Community Classifieds不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 XZeroScripts XZero Community...

Sql injection

SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php...

CVE-2007-6566

SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php...

Remote file inclusion

PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathescape parameter...

CVE-2007-6567

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter in a page view action...

CVE-2007-6568

PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathescape parameter...

Directory traversal

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter in a page view action...

CVE-2007-6566

CVE-2007-6566 describes an SQL injection in post.php of XZero Community Classifieds 4.95.11 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php. The NVD entry lists a CVSS v2 base score of 7.5 (High). No exploitation det...