362 matches found
GeekLog <= 1.5.0 Remote Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + GeekLog = 1.5.0 Remote Arbitrary File Upload + + + + Discovered && Coded By: t0pP8uZz + + + + 0day?!?Most...
GeekLog <= 1.5.0 Remote Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications ===================================================== GeekLog ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...
GeekLog 1.5.0 - Arbitrary File Upload
GeekLog 1.5.0 - Arbitrary File Upload !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...
GeekLog 1.5.0 - Arbitrary File Upload
!/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/fckeditor/editor/filemanager/upload/php/upload.php', ContentType =...
Geeklog Forum Plugin vulnerable to cross-site scripting
Overview Geeklog Forum Plugin contains a cross-site scripting vulnerability. Geeklog Forum Plugin is a plugin for Geeklog, an open source contents management system. Geeklog Forum Plugin contains a cross-site scripting vulnerability. NetAgent Co., Ltd. reported this vulnerability to IPA. JPCERT/C...
Cross site scripting
Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...
CVE-2008-3316
CVE-2008-3316 concerns a cross-site scripting (XSS) vulnerability in the search feature of the Geeklog Forum Plugin (pre-2.7.1). The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors; likely related to files such as public_html/index.php, config.php, and functi...
CVE-2008-3316
Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...
JVN#60419863 Geeklog Forum Plugin vulnerable to cross-site scripting
Geeklog Forum Plugin is a plugin for Geeklog, an open source contents management system. Geeklog Forum Plugin contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the...
Geeklog cross-site scripting vulnerability
Overview Geeklog, an open source content management system, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution None...
FreeBSD : geeklog xss vulnerability (60e1792b-c380-11dc-821a-000bcdc1757a)
Geeklog reports : MustLive pointed out a possible XSS in the form to email an article to a friend that we're fixing with this release. Please note that this problem only exists in Geeklog 1.4.0 - neither Geeklog 1.4.1 nor any older versions 1.3.x series have that problem. %NASLMINLEVEL 70300 C...
Cross-Site Scripting vulnerabilities in Geeklog
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в движке Geeklog. XSS: POST запрос на http://site/profiles.php?sid=1&what=emailstory: "scriptalertdocument.cookie/script В полях: Отправитель, Адрес отправителя, Получатель, Адрес получателя...
geeklog xss vulnerability
Geeklog reports: MustLive pointed out a possible XSS in the form to email an article to a friend that we're fixing with this release. Please note that this problem only exists in Geeklog 1.4.0 - neither Geeklog 1.4.1 nor any older versions 1.3.x series have that problem...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Geeklog: crossite scripting thorugh different form fields...
CVE-2003-1347
Geeklog 1.3.7 is affected by multiple XSS vulnerabilities. Attackers can inject arbitrary script via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage field. The CVE-2003-1347 entry documents these issues and their cross-site scripting...
CVE-2003-1347
Multiple cross-site scripting XSS vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the 1 cid parameter to comment.php, 2 uid parameter to profiles.php, 3 uid to users.php, and 4 homepage field...
Geeklog CAPTCHA Plugin _CONF[path]远程文件包含漏洞
No description provided by source...
Remote file inclusion
PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathsystem parameter...
CVE-2007-2793
PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathsystem parameter...
CVE-2007-2793
CVE-2007-2793 affects Geeklog 2.x via a Remote PHP File Inclusion in the ImageImageMagick.php component. The underlying issue is that an attacker can supply a URL in glConf[path_system], allowing arbitrary PHP code execution on the server. Related materials document an exploitation entry (GEEKLOG...