CVE-2003-1334

CVE-2003-1334 affects Kai Blankenhorn’s Bitfolge (snif) index file before 1.2.7. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the issue but do not provide concret...

CVE-2007-4264

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

CVE-2007-4264

The CVE-2007-4264 issue affects Kai Blankenhorn’s Bitfolge simple and nice index file (snif) versions 1.5.2 and earlier. The vulnerability resides in index.php where cross-site scripting (XSS) can be triggered via the (1) path parameter and the (2) download parameter, allowing remote attackers to...

CVE-2007-4264

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

CVE-2007-4264: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

AL-Athkar.v2.0 Remote File Include

Discovred By : Hasadya Raed ---------------------------- Contact : [email protected] , [email protected] , [email protected] ---------------------------- Greetz : Fairoz ---------------------------- Script: AL-Athkar.v2.0 ---------------------------- Download:...

PT-2007-3744 · Sphider · Sphider

Name of the Vulnerable Software and Affected Versions: Sphider versions 1.2.x Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include dir parameter in the index.php file. A third party disputes this issue, stating that the application is not vulnerabl...

ripewm-xss.txt

Ripe Website Manager Ripe Website Manager discovered by John MartinelliGoogle d0rk: "Powered by Ripe Website Manager" alert1;"...

PT-2007-3414 · Ivan · Ivan Gallery Script

Name of the Vulnerable Software and Affected Versions: Ivan Gallery Script version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter in the index.php file. There is a dispute regarding version 0.3, with some researchers stating that th...

PT-2007-3321 · Xoops +1 · Virii Info +1

Name of the Vulnerable Software and Affected Versions: Xoops module Virii Info versions 1.10 and earlier Description: A remote file inclusion issue in the index.php file of the Virii Info module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfigroot path...

CVE-2007-1967

PHP remote file inclusion vulnerability in index.php in stat12 allows remote attackers to execute arbitrary PHP code via a URL in the langpath parameter. NOTE: this issue was published by an unreliable researcher, and there is little information to determine which product is actually affected. Th...

PT-2007-2871 · Oscommerce · Php Point Of Sale For Oscommerce

Name of the Vulnerable Software and Affected Versions: PHP Point Of Sale for osCommerce version 1.1 Description: The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfg language parameter in index.php. However, it's noted that this issue has been...

PT-2007-2304 · Gnopaste · Gnopaste

Name of the Vulnerable Software and Affected Versions: gnopaste versions 0.5.3 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via the GNP REAL PATH parameter in the index.php file. However, it is noted that GNP REAL PATH is a constant, not a variable, whi...

PT-2007-1655 · Allmylinks · Allmylinks

Name of the Vulnerable Software and Affected Versions: AllMyLinks versions 0.5.0 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the AML opensite parameter in the index.php file. This enables attackers to potentially gain control over the syst...

CVE-2006-6285

PHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the externalConfig parameter. NOTE: CVE and other third parties dispute this vulnerability...

CVE-2006-6285: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the externalConfig parameter. NOTE: CVE and other third parties dispute this vulnerability...

PT-2006-6442 · Rhadrix · Rhadrix If-Cms

Name of the Vulnerable Software and Affected Versions: Rhadrix If-CMS versions 1.01 through 2.07 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the rns parameter in the index.php...

PT-2006-6306 · Unknown · Goop Gallery

Name of the Vulnerable Software and Affected Versions: GOOP Gallery versions prior to 2.0.3 Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary HTML or web script via the image parameter in the index.php file. Recommendations: For versions prior to 2.0....

PT-2006-5967 · Isearch · Isearch

Name of the Vulnerable Software and Affected Versions: iSearch version 2.16 Description: The issue concerns remote file inclusion vulnerabilities that could allow remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the isearch path parameter within various PHP...