7215 matches found
AllMyVisitors 0.4.0 (index.php) Remote File Inclusion Vulnerability
No description provided by source. AllMyVisitors 0.4.0 File Inclusion Vulnerability Affected Software: AllMyVisitors 0.4.0 Download: http://www.php-resource.net//modules/AllMyLinks//action/gotolink.php?AMLlinkid=11 Vulnerable Code in index.php Bugfounder: bd0rk +Exploit:...
AllMyLinks <= 0.5.0 (index.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= AllMyLinks = 0.5.0 index.php Remote File Include Vulnerability ================================================================= /\ AllMyLinks 0.5.0...
AllMyVisitors 0.4.0 - 'index.php' Remote File Inclusion
AllMyVisitors 0.4.0 File Inclusion Vulnerability Affected Software: AllMyVisitors 0.4.0 Download: http://www.php-resource.net//modules/AllMyLinks//action/gotolink.php?AMLlinkid=11 Vulnerable Code in index.php Bugfounder: bd0rk +Exploit:...
PT-2007-1543 · Openpinboard · Openpinboard
Name of the Vulnerable Software and Affected Versions: OpenPinboard version 2.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the language parameter in index.php. However, it has been disputed by the developer and a third party, as the variable is set...
openpinboard-rfi.txt
====================================================================================== OpenPinboard = Remote File Include ====================================================================================== Scripts: OpenPinboard Download...
CVE-2006-4577
CVE-2006-4577 affects The Address Book 1.04e. It contains multiple cross-site scripting (XSS) vulnerabilities allowing an attacker to inject arbitrary scripts via: (1) email, (2) websites, (3) groupAddName in save.php; (4) errorMsg in index.php; (5) goTo and (6) search in search.php. CVSS v2 base...
CVE-2006-4577
Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...
CVE-2006-6845
CVE-2006-6845 : CMS Made Simple 1.0.2 has a Cross-site scripting (XSS) vulnerability in index.php via the cntnt01searchinput parameter in a Search action, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include remediation steps or fixed versions.
CVE-2006-4577
Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...
CVE-2006-6769
CVE-2006-6769 applies to PHP Live! 3.2.2 and earlier, with multiple XSS flaws. Vulnerable components/files include transcripts.php (search_string parameter), index.php (l parameter), phplive/index.php (login field), and phplive/message_box.php (deptid and x parameters). Exploits describe arbitrar...
CVE-2006-6757
The CVE-2006-6757 entry concerns a directory traversal vulnerability in cwmExplorer 1.0, specifically in index.php via the show_file parameter, enabling remote attackers to read arbitrary files and source code and obtain sensitive information. The NVD entry lists a CVSS v2 base score of 7.8 (HIGH...
3editor CMS 0.42 - 'index.php' Local File Inclusion
script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page' include'phplib/treeedit.php'; else...
3editor CMS <= 0.42 (index.php) Local File Include Vulnerability
No description provided by source. script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page'...
CWMExplorer Index.PHP源代码信息泄露漏洞
CWMExplorer是一款基于PHP的WEB应用程序。 CWMExplorer不正确过滤用户提交的输入，远程攻击者可以利用漏洞获得敏感信息。 问题是'index.php'脚本对用户提交的'file'参数缺少过滤，提交脚本文件作为参数，可导致源代码泄露。 cwm-design cwmExplorer 1.0 http://explorer.cwm-design.de/ http://www.example.com/path/index.php?d=0&showfile=file...
3editor CMS <= 0.42 (index.php) Local File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ 3editor CMS = 0.42 index.php Local File Include Vulnerability ================================================================ script Name: 3editor CMS index.php Local File...
CVE-2006-6695
CVE-2006-6695 : XSS in Carsen Klock TextSend 1.5, affected via index.php, vulnerable parameters (1) error and (2) success. This allows remote attackers to inject arbitrary script/HTML. According to NVD, base CVSS v2 score is 6.8 (Medium) with network attack vector, no authentication, and partial ...
CVE-2006-6695
Multiple cross-site scripting XSS vulnerabilities in index.php in Carsen Klock TextSend 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 error or 2 success parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...
VerliAdmin Index.PHP远程文件包含漏洞
VerliAdmin是一款基于PHP的WEB应用程序。 VerliAdmin不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Index.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 VerliAdmin VerliAdmin 0.3 目前没有详细解决方案提供： http://bohyn.czechweb.cz/ ? / P.S Chcialem serdecznie niepozdrowic wszystkie kurwy takie jak Ne0 i jego...
CVE-2006-6616
index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information...
VerliAdmin <= 0.3 (index.php) Remote File Include Exploit
Exploit for unknown platform in category web applications ========================================================= VerliAdmin = 0.3 index.php Remote File Include Exploit ========================================================= ? / P.S Chcialem serdecznie niepozdrowic wszystkie kurwy takie jak N...