474 matches found
CVE-2008-1123
Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the CarpPath parameter to 1 files/carprss.php and 2 files/amazon-bestsellers.php...
RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow
RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow source: https://www.securityfocus.com/bid/27742/info RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently...
RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow
source: https://www.securityfocus.com/bid/27742/info RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may exploit this issue to execute...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...
CVE-2007-3975
Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...
CVE-2007-3975
CVE-2007-3975 is a Cross-site Scripting (XSS) vulnerability in Elite Forum 1.0.0.0, exploitable via the title parameter in a ptopic action on index.php. The public text in the connected documents confirms the vulnerability existence but does not provide concrete technical details beyond the param...
Code injection
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...
CVE-2007-3592
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...
CVE-2007-3591
The CVE-2007-3591 issue affects Elite Bulletin Board, prior to version 1.0.10, in the Profile.php handling. The root cause is described as missing authorization checks on a remote form, enabling remote modification of profile information via unspecified vectors. Impact is limited to unauthorized ...
CVE-2007-3591
Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks...
CVE-2007-3592
Vulnerability CVE-2007-3592 affects Elite Bulletin Board (earlier than 1.0.10). The PM.php module allows remote authenticated users to delete arbitrary private messages and other attacks by modifying id fields, indicating improper input validation of message identifiers. The issue enables manipul...
CVE-2007-3592
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...
Unfixed XSS vulnerability at www.elite-it.com
Security researcher MaXWeL, has submitted on 03/06/2007 a cross-site-scripting XSS vulnerability affecting www.elite-it.com, which at the time of submission ranked 1050762 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/06/2007. It is...
Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities
No description provided by source. ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...
MagicNews-1.0.3.txt
==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.reamdaysoft.com...
magicnewspro.txt
==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.reamdaysoft.com...
Lift the download limit, take a dip cafe-vulnerability warning-the black bar safety net
Cafes bring their own music quite cheesy, without a hint of sporty new, As“New Age”of Internet users, you can willingly take? In this case you sure want to download from the Internet songs, but currently most of the Internet cafes, the function is disabled, the only way is to hack it blockade, so...
CVE-2006-2673
Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...
CVE-2006-2673
CVE-2006-2673 is an XSS vulnerability in Bulletin Board Elite-Board (E-Board) 1.1, residing in search.html and exploitable via the search box to inject arbitrary script/HTML. The connected documents confirm affected component (search.html) and version (E-Board 1.1); root cause details beyond gene...
Bulletin Board Elite-Board v.1.1
Bulletin Board Elite-Board v.1.1 Homepage: http://eng.e-board.net.ru/about/ Description: Multipurpose multifunctional public bulletin board for your website. Easy to install and to use. Has all possible scripts functions of the same type and does not need additional modules and database. It works...