[ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability

ECHOADV55$2006 ------------------------------------------------------------------------ ----------------------- ECHOADV55$2006Phpmybibli =2.1 Multiple Remote File Inclusion Vulnerability ------------------------------------------------------------------------ ----------------------- Author : Dedi...

CVE-2006-5294

Cross-site scripting XSS vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter...

CVE-2006-5294

CVE-2006-5294 affects phplist (index.php) prior to version 2.10.3. The vulnerability is a Cross-Site Scripting (XSS) flaw that enables remote attackers to inject arbitrary web script or HTML through the unsubscribeemail parameter. Root cause is improper handling/sanitization of user-supplied inpu...

CVE-2006-5294

Cross-site scripting XSS vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter...

CVE-2006-5293

Cross-site scripting XSS vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter...

NoahsClassifieds.txt

Noah's Classifieds is prone to a Cross Site Scripting Vulnerability, due to a failure in the application to properly sanitize the "frommethod" POST parameter in "index.php" : alert'XSS Vulnerable';" Advisory: http://zone14.free.fr/advisories/5/ --Raphael HUCK...

CVE-2006-5285

CVE-2006-5285: SQL injection in XeoPort 0.81 (index.php) via the xp_body_text parameter allowing remote arbitrary SQL execution. Underlying issue is insufficient input sanitization in xp_body_text handling. CVSS v2 base score 7.5 (HIGH); attack vector NETWORK, complexity LOW, no authentication re...

CVE-2006-5251

The CVE-2006-5251 entry concerns Deep CMS 2.0a where a PHP remote file inclusion flaw exists in index.php, enabling an attacker to execute arbitrary PHP code by supplying a URL via the ConfigDir parameter. The vulnerability is tied to Deep CMS’s handling of the ConfigDir value and is documented a...

CVE-2006-5251

PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP code via a URL in the ConfigDir parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Noah's Classifieds Cross Site Scripting Vulnerability

Noah's Classifieds is prone to a Cross Site Scripting Vulnerability, due to a failure in the application to properly sanitize the "frommethod" POST parameter in "index.php" : html body form method="POST" enctype="multipart/form-data" action="http://www.example.com/classifieds/index.php" input...

wikyblog.txt

============================================================================================== WikyBlog = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Bug in :index.php Vlu Code :...

phponline-rfi.txt

======================================================================= ======================= phponline = LangFile Remote File Inclusion Exploit ======================================================================= ======================== Bug in :index.php Vlu Code :...

CVE-2006-5206

SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in 1 index.php and 2 forum/index.php, when the rate command in the gallery automodule is used...

phponline <= (LangFile) Remote File Inclusion Exploit

======================================================================= ======================= phponline = LangFile Remote File Inclusion Exploit ======================================================================= ======================== Bug in :index.php Vlu Code :...

WikyBlog <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit

============================================================================================== WikyBlog = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Bug in :index.php Vlu Code :...

Ptl0.2.2.txt

ToXiC Ptl 0.2.2 Local File Inclusion by ToXiC CreW BuG FounD by Drago84 Application Affect:Ptl 0.2.2 Page: index.php Dir : / Problem: iffileexists$configMENUCONFFILE include "./".$configMENUCONFFILE; ExPloit : 1http://www.site.com/ptldir/lib/index.php?2configMENUCONFFILE=...

Flipv3.0.txt

hi... i find a new vub and i want to add the vub on your site... Found By Sp1deRNet .... E-mail....:- [email protected] My Site..... :- WWW.Pal-HackinG.Com //\ Freind Site....:- wWw.SoQoR.Net We Are..:- Sp1deRNet,HackerS Pal,Mohajali. Palstine HackerS Team. -=-=-=-=-=- The Bug In Script :-Fli...

DayfoxBlogv2.0.txt

BiyoSecurity.Org script name : Dayfox Blog v2.0 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim Vulnerable files : adminlog.php postblog.php index.php index2.php Vulnerable code : includeonce $sloginpath . "/sloginlib.inc.php"; includeonce $sloginpath . "/header.inc.php"; Exploit :...

CVE-2006-5128

SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter...

CVE-2006-5120

Multiple cross-site scripting XSS vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 index.php and 2 processlogin.php...