Unfixed XSS vulnerability at www.expression-web-designer-help.com

Security researcher THE-SH0CK-B0Y, has submitted on 04/07/2007 a cross-site-scripting XSS vulnerability affecting www.expression-web-designer-help.com, which at the time of submission ranked 316209 on the web according to Alexa. We manually validated and published a mirror of this vulnerability o...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...

CVE-2007-1620

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...

CVE-2007-1620

CVE-2007-1620: Affects PHP DB Designer 1.02 and earlier. Multiple remote PHP File Inclusion vulnerabilities allow an attacker to craft a URL that sets _SESSION[SITE_PATH] (to wind/help.php or wind/about.php) or _SESSION[DRIVER] (to db/session.php), enabling remote code execution via an included P...

CVE-2007-1620

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...

CVE-2007-1620: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...

PHP DB Designer <= 1.02 Remote File Include Exploit

PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group Exploit:Path/db/session.php?SESSIONDRIVER=Shell...

PHP DB Designer <= 1.02 Remote File Include Vulnerabilities

No description provided by source. PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group...

PHP DB Designer 1.02 - Remote File Inclusion

PHP DB Designer 1.02 - Remote File Inclusion PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group...

PHP DB Designer <= 1.02 Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== PHP DB Designer = 1.02 Remote File Include Vulnerabilities =========================================================== PHP DB Designer = 1.02 Remote File Include Exploit D.Script:...

PHP DB Designer 1.02 - Remote File Inclusion

PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group Exploit:Path/db/session.php?SESSIONDRIVER=Shell...

[Full-disclosure] REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability

Description: REMLAB http://remlab.sourceforge.net/ is a fully fuctional cross-platform web-based Battlemech designer for the tactical board game Battletech http://www.classicbattletech.com/ . REMLAB is built entirely on HTML, PHP, and JavaScript with AJAX functionality. The vulnerability exists i...

CVE-2006-5896

REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the path in an error message...

CVE-2006-5896

REMLAB Web Mech Designer 2.0.5 contains a vulnerability in calculate.php where an incorrect Tonnage value allows a remote attacker to trigger a divide-by-zero error, leaking the full server path in the error message. Affected component: calculate.php (Tonnage parameter). Impact: path disclosure w...

CVE-2006-5896

REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the path in an error message...

CVE-2006-5896: Undefined Security Weakness

REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the path in an error message...

CVE-2006-5440

The CVE-2006-5440 entry describes a PHP remote file inclusion in Comdev Form Designer 4.1, specifically in adminfoot.php. The root cause is the use of register_globals, enabling an attacker to supply a URL in the path[docroot] parameter to execute arbitrary PHP code on the server. This results in...

CVE-2006-5440: Undefined Security Weakness

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Form Designer 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

Microsoft Internet Explorer 6 - Visual Studio COM Object Instantiation Denial of Service

Microsoft Internet Explorer 6 - Visual Studio COM Object Instantiation Denial of Service source: https://www.securityfocus.com/bid/19572/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability that occurs when instantiating Visual Studio COM objects. The vulnerability arise...

eBD-en.txt

=============================== - Advisory - =============================== Tittle: Several flaws in e-business designer Risk: Critical Date: 03.May.2006 Author: Pedro Andújar URL: http://www.digitalsec.es http://www.514.es/ .: INTRO :. eBD is an Integrated Development Environment for the...