Picturesolution 2.1 - config.php?path Remote File Inclusion

Picturesolution 2.1 - config.php?path Remote File Inclusion Picturesolution = v2.1 config.php path Remote File Inclusion Vulnerabilities Found By : Mogatil , http://www.hackteach.org/cc/ Posted By : Cold z3ro , http://www.hackteach.org/cc/ Exploit :...

Format string in The Dawn of Time 1.69s beta4

Luigi Auriemma Application: The Dawn of Time http://www.dawnoftime.org Versions: = 1.69s beta4 and 1.69r too Platforms: nix and Windows Bug: format string in web server authorization Exploitation: remote Date: 05 Oct 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

CVE-2004-2725: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter in a search.php, 2 the email parameter in b subscribe.php, and 3 the return and 4 title parameters in c forum2.php...

Remote file inclusion

PHP remote file inclusion vulnerability in htmls/forum/includes/topicreview.php in UniversiBO 1.3.4 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this issue is disputed by CVE because the applicable include is in a function that is not calle...

Remote file inclusion

PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter...

CVE-2007-5138

CVE-2007-5138 is a PHP remote file inclusion vulnerability affecting lustig.cms BETA 2.5, reported as a flaw in forum/forum.php where an attacker could trigger arbitrary PHP code execution by supplying a URL in the view parameter. The vulnerability is documented across multiple sources (NVD and C...

CVE-2007-5138: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter...

Unfixed XSS vulnerability at www.en.se

Security researcher By Encore, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.en.se, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixe...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...

CVE-2007-4899

Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...

CVE-2007-4899

Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...

CVE-2007-4899

Boinc Forum 5.10.20 and earlier contains multiple XSS vulnerabilities. An attacker can inject arbitrary script/HTML via (1) id in forum_forum.php or (2) search_string in forum_text_search_action.php for both titles and bodies searches. Affected product: Boinc Forum versions up to 5.10.20. The sou...

CVE-2007-4899: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...

Unfixed XSS vulnerability at www.suikast.de

Security researcher St@rExT, has submitted on 09/04/2007 a cross-site-scripting XSS vulnerability affecting www.suikast.de, which at the time of submission ranked 231406 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/04/2007. It is currentl...

Unfixed Redirect vulnerability at www.macuser.de

Security researcher st@rext, has submitted on 22/08/2007 a Redirect vulnerability affecting www.macuser.de, which at the time of submission ranked 17246 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/08/2007. It is currently unfixed. If you...

Dalai Forum Remote File Inclusion Exploit

============================================================================================== Dalai Forum Remote File Inclusion Exploit =============================================================================================== DORK : "Dalai Forum"...

Directory traversal

Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...

CVE-2007-4457

Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...

CVE-2007-4457

Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...

CVE-2007-4457

CVE-2007-4457 describes a directory traversal vulnerability in Dalai Forum 1.1, specifically in forumreply.php, where an attacker can manipulate the chemin parameter using .. to include and execute arbitrary local files. The affected component is the forumreply.php script in Dalai Forum 1.1; the ...