2123 matches found
CVE-2008-2458
CVE-2008-2458 is a Cross-site Scripting (XSS) vulnerability in the Starsgames Control Panel up to version 4.6.2, exploitable via the st parameter in index.php. The underlying issue is an input handling flaw that allows remote attackers to inject arbitrary HTML/script. Impact is described as parti...
Starsgames Control Panel <= 4.6.2 Remote XSS Vulnerability
========================================================== Starsgames Control Panel = 4.6.2 Remote XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 19 May 2008 SITE : www.citec.us APPLICATION : Starsgames Control Panel VERSION : = 4.6.2...
starsgames-xss.txt
========================================================== Starsgames Control Panel XSS =Example= Alert: - http://target/index.php?showtopic=18&st=alert/xss/ Iframe & Fake Login: - http://target/index.php?showtopic=18&st= Let's Fun... Greetz: ZeQ3uL,BAD $ectors, Snapter, Conan, Win7dos, JabAv0C...
CVE-2008-2023
Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 invisible and 2 timeoffset parameters to profile/controlpanel.asp and the 3 attachmentid parameter to forums/attach-file.asp...
MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Descriptio...
Quick Classifieds 1.0 - 'controlpannel/color_help.php3?DOCUMENT_ROOT' Remote File Inclusion
source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...
Horde Webmail file inclusion proof of concept & patch.
Horde 3.1.6 arbitrary file inclusion vulnerability, proof of concept & patch. A severe security vulnerability affects any unix distribution running version 3.1.6 of the Horde webmail client included in most popular webhosting control panels. All previous versions are also affected and it is...
Thecus N5200Pro NAS Server Control Panel RFI Vulnerability
No description provided by source. Thecus N5200Pro NAS Server Control Panel Remote File nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html ?php $htm=$REQUEST'name'; requireonce"/img/htdocs/webconfig"; requireonce"/img/www/inc/function.php"; getsysconf;...
thecus-rfi.txt
Thecus N5200Pro NAS Server Control Panel Remote File İnclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? İnfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke...
Thecus N5200Pro NAS Server Control Panel RFI Vulnerability
Exploit for hardware platform in category remote exploits ========================================================== Thecus N5200Pro NAS Server Control Panel RFI Vulnerability ========================================================== Thecus N5200Pro NAS Server Control Panel Remote File Include...
aliboard Beta Upload Shell From ControlPanel
Name : aliboard Beta Upload Shell From ControlPanel Download From : http://www.alilg.com/software/free-opensource-bulletin-board/ Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM Home Page : WwW.4RxH.CoM Google Dork : Powered by aliboard © 2006, 2007 alilg web-based software...
aliboard-upload.txt
Name : aliboard Beta Upload Shell From ControlPanel Download From : http://www.alilg.com/software/free-opensource-bulletin-board/ Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM Home Page : WwW.4RxH.CoM Google Dork : Powered by aliboard © 2006, 2007 alilg web-based software...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...
CVE-2007-6178
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...
CVE-2007-6178
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...
CVE-2007-6178
CVE-2007-6178 is a known remote file inclusion in Easy Hosting Control Panel (EHCP) for Ubuntu up to version 0.22.8 and earlier. The vulnerability allows an attacker to supply a URL in the confdir parameter to config/dbutil.bck.php and config/dbutil.php, potentially enabling arbitrary PHP code ex...
Directory traversal
Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...
CVE-2007-5321
Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...
CVE-2007-5321
Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...
CVE-2007-5321
CVE-2007-5321 affects Verlihub Control Panel (VHCP) versions 1.7 and earlier, where index.php is vulnerable to a directory traversal via the page parameter (..), allowing remote inclusion of arbitrary files. Root cause is improper sanitization of the page parameter, enabling directory traversal. ...