[DSECRG-08-031] Local File Include Vulnerability in Interact 2.4.1

Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response: 04.07.2008 Solution: YES Date of Publi...

CVE-2008-3315

creationtimestamp| type| source ---|---|--- 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32106 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32107 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32109 2008-07-22...

myblog-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: MyBlog =0.9.8 Multiple Vulnerabilities Vendor: http://crewdesign.co.uk & http://sourceforge.net/projects/myblog Exploit: Available Vulnerable Version: 0.9.8 Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/49 1. Description:...

Interact 2.4.1 - 'help.php' Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response: 04.07.2008 Solution: YES Date of Publi...

DSEGRG-08-31.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response: 04.07.2008 Solution: YES Date of Publi...

Interact E-Learning System 2.4.1 (help.php) LFI Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Interact E-Learning System 2.4.1 help.php LFI Vulnerabilities =============================================================== Application: Interact E-Learning System Versions...

CVE-2008-3360

creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6103 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6116 2008-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6121 2008-08-13...

CVE-2008-3267

creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6110...

CVE-2008-5755

creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6106 2008-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7582 2026-06-28 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mperlhfj3v2t...

CVE-2008-2595

creationtimestamp| type| source ---|---|--- 2008-07-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6101...

Oracle Internet Directory 10.1.4 - Remote Denial of Service

Oracle Internet Directory 10.1.4 - Remote Denial of Service !/usr/bin/python """ Oracle Internet Directory 10.1.4 preauthentication Denial Of Service NOTES: Under 32 bits platforms it crashes immediately. Under 64 bits it may take even hours. Sometimes you need 2 shoots to crash OID completely. T...

CVE-2008-3228

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors...

CVE-2008-3228

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors...

CVE-2008-3313

creationtimestamp| type| source ---|---|--- 2008-07-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32079 2008-07-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32080...

[DSECRG-08-028] File read in Velocity web-server

Digital Security Research Group DSecRG Advisory DSECRG-08-028 Application: Velocity web-server a part of Velocity Security Management System Versions Affected: Old version 1.0 Vendor URL: http://hirschelectronics.com Bugs: Directory traversal File Download Exploits: YES Reported: 03.03.2008 Secon...

CVE-2008-3250

creationtimestamp| type| source ---|---|--- 2008-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6097 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6113...

hockeystats-sql.txt

Viva IslaM Viva IslaM Remote SQL injection Vulnerability Hockeystats Online V BASIC & ADVANCED index.php opt AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRiAN Arab HACkErS -: L!VE DEMO :- BASIC VERSION...

Evaria ECMS 1.1 - 'DOCUMENT_ROOT' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/30262/info ECMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and the underlying system; other attacks are...

Oracle BEA Weblogic 10 — Multiple Linked ХSS vulnerabilities

Application: Oracle BEA Weblogic 10 Versions Affected: Oracle BEA Weblogic 10 Vendor URL: Bugs: Multiple XSS Vulnerabilities in samples Exploits: YES Reported: 16.07.2008 Vendor response: 18.07.2008 Last response: 30.10.2008 Description: Review Service sample of WebLogic Server. Date of Public...

CVE-2008-3260

creationtimestamp| type| source ---|---|--- 2008-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32060 2008-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32065 2008-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32064 2008-07-15...