8132 matches found
CVE-2007-5138: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter...
Unfixed XSS vulnerability at www.en.se
Security researcher By Encore, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.en.se, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixe...
CVE-2007-4899
Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...
CVE-2007-4899
Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...
CVE-2007-4899
Boinc Forum 5.10.20 and earlier contains multiple XSS vulnerabilities. An attacker can inject arbitrary script/HTML via (1) id in forum_forum.php or (2) search_string in forum_text_search_action.php for both titles and bodies searches. Affected product: Boinc Forum versions up to 5.10.20. The sou...
CVE-2007-4899: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...
Unfixed XSS vulnerability at www.suikast.de
Security researcher St@rExT, has submitted on 09/04/2007 a cross-site-scripting XSS vulnerability affecting www.suikast.de, which at the time of submission ranked 231406 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/04/2007. It is currentl...
Unfixed Redirect vulnerability at www.macuser.de
Security researcher st@rext, has submitted on 22/08/2007 a Redirect vulnerability affecting www.macuser.de, which at the time of submission ranked 17246 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/08/2007. It is currently unfixed. If you...
Dalai Forum Remote File Inclusion Exploit
============================================================================================== Dalai Forum Remote File Inclusion Exploit =============================================================================================== DORK : "Dalai Forum"...
CVE-2007-4457
Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...
Directory traversal
Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...
CVE-2007-4457
Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...
CVE-2007-4457
CVE-2007-4457 describes a directory traversal vulnerability in Dalai Forum 1.1, specifically in forumreply.php, where an attacker can manipulate the chemin parameter using .. to include and execute arbitrary local files. The affected component is the forumreply.php script in Dalai Forum 1.1; the ...
CVE-2007-4457: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...
dalai-rfi.txt
============================================================================================== Dalai Forum Remote File Inclusion Exploit =============================================================================================== DORK : "Dalai Forum"...
Dalai Forum 1.1 - forumreply.php Local File Inclusion
Dalai Forum 1.1 - forumreply.php Local File Inclusion source: https://www.securityfocus.com/bid/25361/info Dalai Forum is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and...
Dalai Forum 1.1 - 'forumreply.php' Local File Inclusion
source: https://www.securityfocus.com/bid/25361/info Dalai Forum is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
Various sites program's default database-vulnerability warning-the black bar safety net
Action Network: The default database /data/dvbbs7. mdb BACKUP DATABASE /databackup/dvbbs7. mdb Front: Username: admin Key code: admin888 Background: Username: admin Key code: admin888 --------------- bbsxp: The default database database/bbsxp. mdb ＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿ LeadBBS The default database...