Code injection

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

CVE-2008-2192

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

CVE-2008-2192

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

CVE-2008-2192

CVE-2008-2192 affects IT!CMS (aka itcms) 1.9, specifically the box/minichat/boxpop.php component. The root cause is a static code injection vulnerability that allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter. Connected sources consiste...

Unfixed XSS vulnerability at www.dica33.it

Security researcher LadyViolet, has submitted on 05/11/2008 a cross-site-scripting XSS vulnerability affecting www.dica33.it, which at the time of submission ranked 46006 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is current...

HispaH Model Search - cat.php?cat SQL Injection

HispaH Model Search - cat.php?cat SQL Injection Remote SQL Injection InjEctOr5 TeaM demo dork : find it exploit : http://www.site.me/cat.php?cat=sql injection example:here u can found an sql exploit ::: for admin inf0 :::...

Unfixed XSS vulnerability at www.uniroma3.it

Security researcher g4br1, has submitted on 05/01/2008 a cross-site-scripting XSS vulnerability affecting www.uniroma3.it, which at the time of submission ranked 43964 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is currently...

Unfixed XSS vulnerability at www.it-xsj.com

Security researcher PD, has submitted on 23/04/2008 a cross-site-scripting XSS vulnerability affecting www.it-xsj.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is currently unfixed...

Secunia Research: Internet Explorer Data Stream Handling Vulnerability

====================================================================== Secunia Research 08/04/2008 - Internet Explorer Data Stream Handling Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2008-1635

Directory traversal vulnerability in viewprivate.php in Keep It Simple Guest Book KISGB 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tmptheme parameter. NOTE: 5.1.1 is also reportedly affected...

Directory traversal

Directory traversal vulnerability in viewprivate.php in Keep It Simple Guest Book KISGB 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tmptheme parameter. NOTE: 5.1.1 is also reportedly affected...

CVE-2008-1635

Directory traversal vulnerability in viewprivate.php in Keep It Simple Guest Book KISGB 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tmptheme parameter. NOTE: 5.1.1 is also reportedly affected...

CVE-2008-1635

CVE-2008-1635 affects Keep It Simple Guest Book (KISGB) up to version 5.0.0 (and reportedly 5.1.1) via a directory-traversal flaw in view_private.php. The vulnerability arises from a .. path in the tmp_theme parameter, allowing remote attackers to include and execute arbitrary local files. Docume...

KISGB <= (tmp_theme) 5.1.1 Local File Inclusion Vulnerability

No description provided by source. KISGB Keep It Simple Guest Book : Local FiLe Include's tmptheme Version : All Versions Download : http://sourceforge.net/project/showfiles.php?groupid=38585 ---------------------------------------------------------- Exploit coded and founded by Cr@zyKing Date:...

CVE-2008-1591

creationtimestamp| type| source ---|---|--- 2008-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5292...

4 0 4 hung it + bloopers + AD-vulnerability warning-the black bar safety net

Source: six-winged hedgehog so-hedgehog nest http://www.688ip.com/dae5g45 Today in the card rice to see is said to be hung it's something that you want to get the source but returns a 4 0 4; and Careful a look, indeed is hung it from the server there returns the of 4 0 of 4 information inside...

freePHPgallery 0.6 - Cookie Local File Inclusion

--==+================================================================================+==-- --==+ freePHPgallery 0.6 Cookie Local File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: freePHPgallery 0.6 Cookie Local Fil...

DSECRG-08-013.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-013 Application: MODx CMS Versions Affected: 0.9.6.1, 0.9.6.1p1 Vendor URL: http://modxcms.com/ Bugs: XSS, SiXSS, stored XSS, Change User Password XSRF Vulnerability. Exploits: YES Reported: 11.01.2008 Vendor response: 11.01.2008 Updated...

Unfixed XSS vulnerability at www.eschbachit.de

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.eschbachit.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

xml2owl 0.1.1 - 'showcode.php' Remote Command Execution

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote...