Lucene search
K

31 matches found

securityvulns
securityvulns
added 2011/12/04 12:0 a.m.53091 views

WikkaWiki <= 1.3.2 Multiple Security Vulnerabilities

---------------------------------------------------- WikkaWiki = 1.3.2 Multiple Security Vulnerabilities ---------------------------------------------------- author............: Egidio Romano aka EgiX mail..............: n0b0d13satgmaildotcom software link.....: http://wikkawiki.org/...

7.5CVSS0.1AI score0.63617EPSS
Exploits17
NVD
NVD
added 2011/02/23 1:0 a.m.6 views

CVE-2011-1063

Multiple cross-site scripting XSS vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 datatitle parameters in an edit action to files.php, or 3 id parameter in a view action to gallery.php...

4.3CVSS5.8AI score0.00401EPSS
Exploits1References5
Cvelist
Cvelist
added 2011/02/22 11:0 p.m.13 views

CVE-2011-1063

Multiple cross-site scripting XSS vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 datatitle parameters in an edit action to files.php, or 3 id parameter in a view action to gallery.php...

5.8AI score0.00401EPSS
Exploits1References5
Exploit DB
Exploit DB
added 2010/01/24 12:0 a.m.741 views

BoastMachine 3.1 - Arbitrary File Upload

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : boastMachine v3.1 Remote File Upload Vulnerability Author: alnjm33 Software Link: http://boastology.com/pages/dload.php?id=bmachine-3.1.zip Software...

7.4AI score
Exploits0
Cvelist
Cvelist
added 2009/10/26 5:0 p.m.13 views

CVE-2009-3787

files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in between two . dot characters, which is filtered into a "../" sequence...

6.7AI score0.04186EPSS
Exploits2References4
0day.today
0day.today
added 2009/08/03 12:0 a.m.17 views

simplePHPWeb 0.2 (files.php) Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================================ simplePHPWeb 0.2 files.php Authentication Bypass Vulnerability ================================================================ + simplePHPWeb 0.2 Authentication Bypass...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2009/08/03 12:0 a.m.7 views

simplePHPWeb 0.2 - files.php Authentication Bypass

simplePHPWeb 0.2 - files.php Authentication Bypass + simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download :...

0.5AI score
Exploits0
Exploit DB
Exploit DB
added 2009/08/03 12:0 a.m.31 views

simplePHPWeb 0.2 - 'files.php' Authentication Bypass

simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplephpweb/files/simplephpweb/simplephpweb-v0.2/simplephpweb-v0.2.zip/download + Authentication Bypass Vulnerability - No...

7AI score
Exploits0
NVD
NVD
added 2006/01/31 11:3 a.m.5 views

CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

7.5CVSS6.7AI score0.08685EPSS
Exploits0References6
Cvelist
Cvelist
added 2006/01/31 11:0 a.m.13 views

CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

6.7AI score0.08685EPSS
Exploits0References6
CVE
CVE
added 2002/05/03 4:0 a.m.46 views

CVE-2002-0282

DCP-Portal versions 3.7–4.5 contain an information disclosure vulnerability that allows remote attackers to obtain the server’s physical path. The issue occurs when an empty request to add_user.php is made, or via an invalid new_language parameter in contents.php, categories.php, or files.php, ca...

5CVSS6.3AI score0.01395EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder