9370 matches found
CVE-2006-3667
Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors...
CVE-2006-3667
Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors...
CVE-2006-3667
The vulnerability CVE-2006-3667 affects Sybase/Financial Fusion Consumer Banking Suite prior to version 20060706. Descriptions show an unspecified vulnerability with unknown impact and remote attack vectors; no concrete root cause, affected subcomponents, or exploit details are provided in the co...
CVE-2006-3555
Multiple cross-site scripting XSS vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using editprofile.php to upload a 1 avatar or 2 forum image attachment that has a .gif or .jpg extension, and begins with a GIF header...
CVE-2006-3555
Multiple cross-site scripting XSS vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using editprofile.php to upload a 1 avatar or 2 forum image attachment that has a .gif or .jpg extension, and begins with a GIF header...
CVE-2006-3555
PHP-Fusion submit.php (before version 6.01.3) is vulnerable to multiple XSS flaws. An attacker can abuse edit_profile.php to upload an avatar or forum image (GIF/JPG) that starts with a GIF header followed by JavaScript, which is then executed by Internet Explorer. Affected component: submit.php ...
CVE-2006-3387
Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when registerglobals is enabled, allows remote attackers to include arbitrary files via a .. dot dot sequence in the filconfig parameter, which can be used to execute PHP code that has been injected into a log file...
CVE-2006-3387
Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when registerglobals is enabled, allows remote attackers to include arbitrary files via a .. dot dot sequence in the filconfig parameter, which can be used to execute PHP code that has been injected into a log file...
CVE-2006-3387
CVE-2006-3387 describes a directory traversal vulnerability in Fusion News 1.0. When register_globals is enabled, an attacker can manipulate the fil_config parameter in sources/post.php using a .. sequence to include arbitrary files. This can allow an attacker to execute PHP code that has been in...
Php-Fusion (Xss) With Avatar Upload
Hi; ================== http://php-fusion.co.uk/ ================== Php-Fusion Xss With Avatar Upload... With This Vulnerability, You Are able To Become Any User Who Uses a Browser That "internet Explorer"Support Cross Site Scripting, So it is Possible To Become Admin. Firefox Can't Write.. Admin ...
fusionpolls.txt
Fusion Polls xtrphome Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/admin/index.php?xtrphome=Command-Shell /SpC-x...
Fusion Polls (xtrphome) Remote File Inclusion
Fusion Polls xtrphome Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/admin/index.php?xtrphome=Command-Shell /SpC-x...
Fusion News v.1.0 (fil_config) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ============================================================ Fusion News v.1.0 filconfig Remote File Inclusion Exploit ============================================================ !/usr/bin/perl use IO::Socket; Exploit coded by: X0r1 Bug...
Fusion News v.1.0 (fil_config) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; Exploit coded by: X0r1 Bug found by: X0r1 release: 21.05.06 vulnerable code in sources\post.php at lines 32-35: ---------------------------------------------------------------------------------- ... global $VARS, $TEMPLATE, $fillan...
Fusion News 1.0 (fil_config) - Remote File Inclusion
!/usr/bin/perl use IO::Socket; Exploit coded by: X0r1 Bug found by: X0r1 release: 21.05.06 vulnerable code in sources\post.php at lines 32-35: ---------------------------------------------------------------------------------- ... global $VARS, $TEMPLATE, $fillang, $filconfig, $urlfs, $urlsmil,...
CVE-2006-2459
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srchwhere parameter...
Sql injection
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srchwhere parameter...
CVE-2006-2459
The CVE-2006-2459 issue affects PHP-Fusion up to version 6.00.307 (and earlier) in messages.php, where the srch_where parameter is vulnerable to SQL injection by remote authenticated users. The vulnerability arises from improper handling of user-supplied input in the SQL query, enabling arbitrary...
