1886 matches found
Vulnerabilities in FireStats
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в FireStats плагине для WordPress и других CMS. Full path disclosure: http://site/wp-content/plugins/firestats/js/firestats.js.php...
Bilboblog 2.1 Multiple Remote Vulnerabilities
No description provided by source. ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...
bilboblog 2.1 - Multiple Vulnerabilities
bilboblog 2.1 - Multiple Vulnerabilities ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...
bilboblog 2.1 - Multiple Vulnerabilities
------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link : http://www.tux-planet.fr/bilboblog-version-021-english-translation/ Vuln. types : Login Bypass -...
CVE-2008-2723
embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."...
CVE-2008-2723
embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."...
New vulnerabilities in Power Phlogger
Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых SQL Injection, Information Leakage и Full path disclosure уязвимостях в Power Phlogger. SQL Injection:...
New vulnerabilities in Power Phlogger
Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Information leakage, Full path disclosure и Denial of Service уязвимостях в Power Phlogger. Information leakage: http://site/modules/dbdump.php Утечка названия базы данных, названия и структуры таблиц. Full path disclosure:...
New vulnerabilities in Power Phlogger
Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting и Full path disclosure уязвимостях в Power Phlogger. XSS Persistent: POST запрос на странице http://site/edUserprofile.php возможны как GET, так и POST запросы: /textareascriptalertdocument.cookie/script В параметре:...
minibb-xsssql.txt
Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On --------------------------------------- 21/04/2008 Vendor informed 22/04/20...
miniBB 2.2 (CSS/SQL/FPD) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== miniBB 2.2 CSS/SQL/FPD Multiple Remote Vulnerabilities ======================================================== Author: GiReX Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site:...
MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure
MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On...
miniBB 2.2 (CSS/SQL/FPD) Multiple Remote Vulnerabilities
No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On ---------------------------------------...
MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure
Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On --------------------------------------- 21/04/2008 Vendor informed 22/04/20...
Path traversal
WoltLab Community Framework WCF 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid 1 page and 2 form parameters, which leaks the path from an exception handler when a valid class cannot be found...
WoltLab(R) Community Framework XSS and Full Path Disclosure Vulnerability
====================================================================== Advisory : WoltLabR Community Framework XSS and Full Path Disclosure Vulnerability Release Date : Application : WoltLabR Community Framework Version : WCF 1.0.6 and lower Platform : PHP Vendor URL : http://community.woltlab.co...
terracotta-lfidownload.txt
Its been awhile since I've posted something, so lets get to the goods. Terracotta is a an open source CMS from http://sourceforge.net/projects/terracotta/ First up, we have Full path disclosure vulnerabilities in the GET'd variable 'File'. Specify something other than whats in the list and we get...
Terracotta Personal Edition Multiple vulnerabilities
Its been awhile since I've posted something, so lets get to the goods. Terracotta is a an open source CMS from http://sourceforge.net/projects/terracotta/ First up, we have Full path disclosure vulnerabilities in the GET'd variable 'File'. Specify something other than whats in the list and we get...
New vulnerabilities in Power Phlogger
Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting и Full path disclosure уязвимостях в Power Phlogger. XSS Persistent: На странице http://site/dspStats.php?edit=mp в логах посещений не фильтруется информация о страницах сайта. Если счётчик установлен на 404 странице или...