CVE-2007-6479: Undefined Security Weakness

Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...

GoSamba 1.0.1 - INCLUDE_PATH Multiple Remote File Inclusions

GoSamba 1.0.1 - INCLUDEPATH Multiple Remote File Inclusions GoSamba 1.0.1 includepath Multiple Remote File Inclusion Vulnerabilities http://mesh.dl.sourceforge.net/sourceforge/gosamba/gosamba.1.0.1.tar.gz POC : /incgroup.php?includepath=http://localhost/scripts/020.txt?...

CVE-2003-1361

Unknown vulnerability in VERITAS Bare Metal Restore BMR of Tivoli Storage Manager TSM 3.1.0 through 3.2.1 allows remote attackers to gain root privileges on the BMR Main Server...

Unfixed XSS vulnerability at www.kommun-biblioteket.vilhelmina.com

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www.kommun-biblioteket.vilhelmina.com, which at the time of submission ranked 6652756 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2007-5119: Improper Input Validation

JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information full path via an invalid integer in the version parameter to the default URI under attach/Main/...

Proxy Anket v3.0.1 Sql injection Vulnerable

//////////////// Yollubunlar.Org //////////////////// Proxy Anket v3.0.1 Sql injection Vulnerable Author : Yollubunlar.Org Orginal Article : http://yollubunlar.org/proxy-anket-v301-sql-injection-vulnerable-3502.html Main Page: http://yollubunlar.org/category/web-security Script :...

QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= QuickEStore = 8.2 insertorder.cfm Remote SQL Injection Vulnerability ======================================================================= web application:QuickEStor...

CVE-2006-7209

Multiple cross-site scripting XSS vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the 1 main, 2 daily, 3 weekly, 4 monthly, 5 new trends, 6 individual page, and 7 search engine...

CVE-2007-2902: Undefined Security Weakness

SQL injection vulnerability in main/auth/myprogress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter...

NavBoard 2.6.0 - Remote Code Execution

"; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print ""; print ""; print "Admin email address blank will not display"; print ""; print "input type=text name="adminemail" value="$configarr...

XSS in Microsoft SharePoint

Hi! I think this is a XSS in MS SharePoint, you can reproduce it in SharePoint test server using for example following url: http://www.example.com/sharepoint/default.aspx/22;iftruealert22qwertytis This is due a lack of string stripping when putting the path into javascript. It seems to work at...

Sisplet CMS &lt;= 05.10 &#40;site_path&#41; Remote File Inclusion Vulnerability

Sisplet CMS Found by kezzap66345 Script Download:http://www.sisplet.org/uploadi/editor/Sisplet0504.tar.bz2 https://sourceforge.net/project/showfiles.php?groupid=111881 ERROR1: File:main/forum/komentar.php require$sitepath.'main/forum/class.php'; rfi coded RFI1:...

Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Mambo Component zOOm Media Gallery array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags array...

Unfixed XSS vulnerability at www.fdp-main-tauber.de

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.fdp-main-tauber.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Sisplet CMS 05.10 - 'site_path' Remote File Inclusion

Sisplet CMS Found by kezzap66345 Script Download:http://www.sisplet.org/uploadi/editor/Sisplet0504.tar.bz2 https://sourceforge.net/project/showfiles.php?groupid=111881 ERROR1: File:main/forum/komentar.php require$sitepath.'main/forum/class.php'; rfi coded RFI1:...

QFTP &#40;LIBFtp 3.1-1&#41; &#40;command line&#41; sprintf&#40;&#41; local buffer overflow

http://nbpfaus.net/pfau/ftplib/ qftp is a utility that performs file transfers using ftplib based on instructions presented on the command line. Description buffer overflow in sprintf, setumask don't check sizelen of passed argument. Source error in main: 337: case 'm' : setumaskoptarg; break;...

CVE-2007-1458

Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 inccheckdatelang.php, 2 inccharsetfx.php, 3 incconfigcolor.php, 4 inccurrencyset.php, 5 incdbmakelink.php, 6 incdiagnosticsreportfx.php, 7...

Ekiga format string flaw

Multiple format string vulnerabilities in the gmmainwindowflashmessage function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet...

CVE-2007-1458: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 inccheckdatelang.php, 2 inccharsetfx.php, 3 incconfigcolor.php, 4 inccurrencyset.php, 5 incdbmakelink.php, 6 incdiagnosticsreportfx.php, 7...

CVE-2007-1138

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...