JMweb - 'src' Local File Inclusion

JMweb MP3 src Multiple Local File Inclusion + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex Script Homepage: http://www.jesse-web.co.cc // + Download :...

Gentoo Security Advisory GLSA 200501-14 (media-sound/mpg123)

The remote host is missing updates announced in advisory GLSA 200501-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-14 (media-sound/mpg123)

The remote host is missing updates announced in advisory GLSA 200501-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4174

Multiple cross-site scripting XSS vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 currentpath, 2 invert, 3 search, and 4 sort parameters...

CVE-2008-4174

CVE-2008-4174 affects Dynamic MP3 Lister 2.0.1. The vulnerabilities are multiple XSS in index.php, allowing remote attackers to inject arbitrary web script or HTML via the parameters currentpath, invert, search, and sort. The root cause is input handling in index.php leading to script injection. ...

CVE-2008-4141

Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the webroot parameter to 1 includes/functioncore.php and 2 templates/layoutlyrics.php...

CVE-2008-4141

CVE-2008-4141 affects the x10Media x10 Automatic MP3 Script 1.5.5. The vulnerability is a remote file inclusion that allows an attacker to supply a URL in the web_root parameter to (1) includes/function_core.php and (2) templates/layout_lyrics.php, enabling arbitrary PHP code execution on the ser...

x10media-rfi.txt

THUNDER X10media Mp3 Search Engine v1.5.5 Remote File Inclusion Vulnerability Founded by : THUNDER Dork: "This search engine is in no way intended for illegal downloads." Vuln Code: file : /includes/functioncore.php -88.- include $webroot."js/Mp3Player.php";...

X10media Mp3 Search Engine 1.5.5 Remote File Inclusion Vulnerability

No description provided by source. THUNDER X10media Mp3 Search Engine v1.5.5 Remote File Inclusion Vulnerability Founded by : THUNDER t4hathotmail.fr Dork: "This search engine is in no way intended for illegal downloads." Vuln Code: file : /includes/functioncore.php -88.- include...

X10media Mp3 Search Engine 1.5.5 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== X10media Mp3 Search Engine 1.5.5 Remote File Inclusion Vulnerability ==================================================================== THUNDER X10media Mp3 Search Engi...

X10media Mp3 Search Engine 1.5.5 - Remote File Inclusion

X10media Mp3 Search Engine 1.5.5 - Remote File Inclusion THUNDER X10media Mp3 Search Engine v1.5.5 Remote File Inclusion Vulnerability Founded by : THUNDER Dork: "This search engine is in no way intended for illegal downloads." Vuln Code: file : /includes/functioncore.php -88.- include...

X10media Mp3 Search Engine 1.5.5 - Remote File Inclusion

THUNDER X10media Mp3 Search Engine v1.5.5 Remote File Inclusion Vulnerability Founded by : THUNDER Dork: "This search engine is in no way intended for illegal downloads." Vuln Code: file : /includes/functioncore.php -88.- include $webroot."js/Mp3Player.php";...

Dynamic MP3 Lister 2.0.1 - index.php Multiple Cross-Site Scripting Vulnerabilities

Dynamic MP3 Lister 2.0.1 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31151/info Dynamic MP3 Lister is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may levera...

dynamicmp3-xss.txt

Author : Xylitol Contact : n/a Vendor : benjamin kuz www.ben.ursux.com Version: 2.0.1 D0rks : dynamic MP3 lister 2.0.1 by benjamin kuz :: netscape users click here Public release vulnz: 10/09/08 Impact: low Stop lammer Dynamic MP3 Lister 2.0.1 1. Description: Dynamic MP3 Lister is a quick, easy w...

FreeBSD Ports: yamt

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Acoustica MP3 CD Burner 4.51 Build 147 (asx file) Local BOF Exploit

No description provided by source. !/usr/bin/perl Acoustica MP3 CD Burner asx file Local BOF Exploit Author: Koshi Date: 08-29-08 0day Application: Acoustica MP3 CD Burner Version: 4.51 Build 147 possibly older Site: http://acoustica.com/download.htm Tested On: Windows XP SP3 Fully Patched Based...

Acoustica MP3 CD Burner 4.51 Build 147 (asx file) Local BOF Exploit

Exploit for unknown platform in category local exploits =================================================================== Acoustica MP3 CD Burner 4.51 Build 147 asx file Local BOF Exploit =================================================================== !/usr/bin/perl Acoustica MP3 CD Burner...

Acoustica MP3 CD Burner 4.51 Build 147 - .asx Local Buffer Overflow

Acoustica MP3 CD Burner 4.51 Build 147 - .asx Local Buffer Overflow !/usr/bin/perl Acoustica MP3 CD Burner asx file Local BOF Exploit Author: Koshi Date: 08-29-08 0day Application: Acoustica MP3 CD Burner Version: 4.51 Build 147 possibly older Site: http://acoustica.com/download.htm Tested On:...

Acoustica MP3 CD Burner 4.51 Build 147 - '.asx' Local Buffer Overflow

!/usr/bin/perl Acoustica MP3 CD Burner asx file Local BOF Exploit Author: Koshi Date: 08-29-08 0day Application: Acoustica MP3 CD Burner Version: 4.51 Build 147 possibly older Site: http://acoustica.com/download.htm Tested On: Windows XP SP3 Fully Patched Based off of n00b's findings...

Cross site scripting

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...