CVE-2008-3072

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Unspecified vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."...

CVE-2008-3029

Cross-site scripting XSS vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3043

Unspecified vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."...

CVE-2008-3043

Technical details about CVE-2008-3043 are not publicly available in the provided documents. The connected entries repeat the vulnerability description without disclosing affected products, versions, root cause, or exploits. Monitor for updates.

CVE-2008-3029

Cross-site scripting XSS vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3029

Technical details for CVE-2008-3029 are not publicly available in the provided documents. No affected products, versions, vectors, or patches are specified here. Monitor for updates.

Xpoz SQL-INJECTION, XSS.

Xpoz SQL-INJECTION, XSS. Application: Xpoz PRO Expoze Photo Store ------------ Website: http://xpoze.org -------- Version: Allcurrent 1.0 -------- About: ------ Xpoze is a photo store very easy to use, yet having lots of features to help buyers and sellers to find or sell images after their needs...

CVE-2008-2993

Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 foglang and 2 fogskin parameters, probably related to libs/required/share.inc; and possibly the 3 fogpseudo, 4 fogposted, 5...

CVE-2008-2993

Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 foglang and 2 fogskin parameters, probably related to libs/required/share.inc; and possibly the 3 fogpseudo, 4 fogposted, 5...

CVE-2008-2993

CVE-2008-2993 affects FOG Forum 0.8.1. The vulnerability is a directory-traversal in index.php allowing remote attackers to include and execute arbitrary local files by manipulating the dot-dot (..) in parameters (fog_lang, fog_skin) and possibly (fog_pseudo, fog_posted, fog_password, fog_cook), ...

CVE-2008-2965

Cross-site scripting XSS vulnerability in viewforum.php in JaxUltraBB JUBB 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

Directory traversal

Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 thumbtemplate parameter to a admin/templates/templatethumbnail.php, and the 2...

CVE-2008-2965

Cross-site scripting XSS vulnerability in viewforum.php in JaxUltraBB JUBB 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

Orca 2.0 (params.php) Remote File Inclusion Vulnerability

No description provided by source. Orca - Interactive Forum Script Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download :...

orca-rfi.txt

Orca - Interactive Forum Script Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download :...

Orca 2.0/2.0.2 (params.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== Orca 2.0/2.0.2 params.php Remote File Inclusion Vulnerability =============================================================== Orca - Interactive Forum Script Remote File...

Orca 2.02.0.2 - params.php?gConf[dir][layouts] Remote File Inclusion

Orca 2.02.0.2 - params.php?gConfdirlayouts Remote File Inclusion Orca - Interactive Forum Script Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS...

Orca 2.0/2.0.2 - 'params.php?gConf[dir][layouts]' Remote File Inclusion

Orca - Interactive Forum Script Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download :...