CVE-2008-3710

CVE-2008-3710 relates to CyBoards PHP Lite 1.21, where multiple directory traversal flaws allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) script_path parameter to options.php and the (2) lang_code parameter to copy_vip.php and proce...

CVE-2008-3707

CVE-2008-3707 describes multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite (versions around 1.21/1.25) that allow an attacker to execute arbitrary PHP code by supplying a malicious URL in the script_path parameter to a long list of scripts (e.g., flat_read.php, post.php, proc...

CVE-2008-3709: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrary web script or HTML via the 1 lOptionsOptions, 2 lNavAdminOptions, or 3 lNavReturn parameter to options.php; or the 4 lNavReturn parameter to subscribe.php...

CVE-2008-3707: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 flatread.php, 2 post.php, 3 processpost.php, 4 processsearch.php, 5 forum.php, 6 processsubscribe.php, 7 read.php, 8...

CVE-2008-3710: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 scriptpath parameter to a options.php and the 2 langcode parameter to b copyvip.php and c processeditboard.php in...

cyboards-rfilfixss.txt

┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

CVE-2008-3269

WRPCServer.exe in WinSoftMagic WinRemotePC WRPC Lite 2008 and Full 2008 allows remote attackers to cause a denial of service CPU consumption via a crafted packet to TCP port 4321...

WinRemotePC Full+Lite 2008 r.2server - Denial of Service

WinRemotePC Full+Lite 2008 r.2server - Denial of Service include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 200...

CVE-2008-2905: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the CacheLite package in Mambo 4.6.4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Mambo <= 4.6.4 (Output.php) Remote File Inclusion Vulnerability

No description provided by source. .-----------------------------------------------------------------------------. | vuln.: Mambo = 4.6.4 Remote File Inclusion Vulnerability | | download: http://mambo-foundation.org/ | | | | author: [email protected] | | &...

Mambo 4.6.4 Cache Lite Output Remote File Inclusion

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require...

Mambo 4.6.4 - Cache Lite Output Remote File Inclusion (Metasploit)

Mambo 4.6.4 - Cache Lite Output Remote File Inclusion Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mambo <= 4.6.4 (Output.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== Mambo = 4.6.4 Output.php Remote File Inclusion Vulnerability ===============================================================...

Stack overflow

Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager LDM before 2.56, allow remote attackers to execute arbitrary code via...

PT-2008-2565 · Backweb +1 · Backweb +1

Name of the Vulnerable Software and Affected Versions: BackWeb versions prior to 8.1.1.87 Logitech Desktop Manager versions prior to 2.56 Description: The issue is related to multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control. This allows remote attackers to...

BackWeb Lite Install Runner ActiveX stack buffer overflows

Overview The BackWeb Lite Install Runner ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description BackWeb Lite Install Runner is an ActiveX control that is used to install software on...

CVE-2008-2527

Cross-site scripting XSS vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...

Sql injection

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId parameter...

CVE-2008-2225

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId parameter...

CVE-2008-2225

CVE-2008-2225 describes an SQL injection in gameCMS Lite 1.0 . The vulnerability is triggered in the index.php file via the systemId parameter, allowing remote attackers to execute arbitrary SQL commands. The provided sources (NVD, CVE lists) confirm the affected component and the injection vecto...