3943 matches found
CVE-2006-2642: Undefined Security Weakness
UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in Marco M. F. De Santis Php-residence 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure i...
MySmartBB<---v 1.1.x SQL Injection/XSS
------------------------ foud by BoNy-m :::..alshmokh team..:: Site: http://www.alshmokh.com ------------------------ ----example: http://www.target.com/forums/misc.php?profile=1&id=SQL&XSS http://www.target.com/forums/misc.php?profile=1&username=SQL&XSS ----Search: Powered by MySmartBB 1.1.2&...
Multiple vulnerabilities in Blur6ex
k k kkkk k kkkk k k kkkkkk kkkkkk kkkk k k k k k k k k k k k k k k kk k k k k kk k k k k kk kkkkk k kkkkk kk kk kkkkkk k k k k k k kk k k k k k k k kk k k k k k k k k k k k k kkkk k kkkk k k kk k k kkkk k kk k k k -+| Multiple Vulnerabilities in blur6ex Author : Rusydi Hasan M a.k.a : cR45H3R Dat...
CVE-2006-1535: Undefined Security Weakness
Cross-site scripting XSS vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter...
CVE-2006-1419: Undefined Security Weakness
SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...
CVE-2006-1413: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 adid or 2 aname parameter in a common/email.asp, b users/userssearch.asp, or c users/usersprofiles.asp; 3 page parameter in d...
Cross site scripting
Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1151
Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...
CVE-2006-1152
PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1151
CVE-2006-1151 is a cross-site scripting vulnerability in M-Phorum 0.2, exploitable via the go parameter in index.php. The NVD entry notes an injected script/HTML and a CVSS2 base score of 5.0 (MEDIUM) with network access, no authentication, and partial integrity impact (I:P). Affected component: ...
CVE-2006-1152
CVE-2006-1152 affects M-Phorum 0.2. The issue is a PHP remote file inclusion in index.php where an attacker can include arbitrary files through the go parameter. According to the NVD entry, the vulnerability has a CVSSv2 base score of 5.0 (Medium) with network attack vector, low complexity, no au...
CVE-2006-1151
Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...
CVE-2006-1152
PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1152: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1151: Undefined Security Weakness
Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...
M-Phorum Cross Site Scripting
------------------------------------------------------------------------------------- M-Phorum Cross Site Scripting Site:http://m-phorum.sourceforge.net/site/ Credit : CodeXpLoder'tq webpage:www.biyosecurity.com Mail :[email protected]...
EV0082.txt
New eVuln Advisory: Leif M. Wright's Blog Multiple Vulnerabilities http://evuln.com/vulns/82/summary.html --------------------Summary---------------- eVuln ID: EV0082 CVE: CVE-2006-0843 CVE-2006-0844 CVE-2006-0845 CVE-2006 Software: Leif M. Wright's Blog Sowtware's Web Site:...
[eVuln] Leif M. Wright's Blog Multiple Vulnerabilities
New eVuln Advisory: Leif M. Wright's Blog Multiple Vulnerabilities http://evuln.com/vulns/82/summary.html --------------------Summary---------------- eVuln ID: EV0082 CVE: CVE-2006-0843 CVE-2006-0844 CVE-2006-0845 CVE-2006 Software: Leif M. Wright's Blog Sowtware's Web Site:...
CVE-2006-0917
Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...