CVE-2017-6397: Improper Neutralization of Input During Web Page Generation

An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several -sub-menu.php pages. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

A-Blog 2.0 - (menu.php) Remote File Include Vulnerability

No description provided by source. ToXiC A-Blog Remote File Include BuG FounD by Drago84 Application Affect:A-Blog Source Code: http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: ?php include $navigationstart; ? ?php include$navigationmiddle; ? Soluction: Include in page...

Simple Machines forum (SMF) 2.0 session hijacking

No description provided by source. Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csrf attacks sending a...

Directory traversal

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

CVE-2010-4977: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in menu.php in the Canteen comcanteen component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php...

CVE-2011-3766: Exposure of Sensitive Information to an Unauthorized Actor

OrangeHRM 2.6.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/orange/menu/Menu.php and certain other files...

Simple Machines Forum 2.0 Session Hijacking

Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csrf attacks sending a session token in all the requests...

Simple Machines forum (SMF) 2.0 session hijacking

Exploit for php platform in category web applications Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csr...

Simple Machines Forum (SMF) 2.0 - Session Hijacking

Simple Machines Forum SMF 2.0 - Session Hijacking Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csrf...

CVE-2010-4611: Exposure of Sensitive Information to an Unauthorized Actor

Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to 1 pages.php and 2 menu.php in includes/corefiles and 3 extensions/login/frontend/pages/antihacker.php, which reveals the installation path in an error message...

Direct News 4.10.2 - Multiple Remote File Inclusions

Direct News 4.10.2 - Multiple Remote File Inclusions \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Direct News 4.10.2 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/directnews/downloads/list Author: mat Mail:...

phpNagios 'conf[lang]' Parameter Local File Inclusion Vulnerability

The host is running phpNagios and is prone to local file include Vulnerabilities. OpenVAS Vulnerability Test $Id: gbphpnagioslfivuln.nasl 5373 2017-02-20 16:27:48Z teissa $ phpNagios 'conflang' Parameter Local File Inclusion Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Directory traversal

Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the conflang parameter...

CVE-2009-4626

Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the conflang parameter...

CVE-2009-4626: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the conflang parameter...

phpNagios 1.2.0 Local File Inclusion

------------------------------------------------------------------------------------- phpNagios v 1.2.0 menu.php LFI Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail: uykucuatwindowslivedotcom Script Download:...

PHPNagios 1.2.0 - 'menu.php' Local File Inclusion

------------------------------------------------------------------------------------- phpNagios v 1.2.0 menu.php LFI Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail: uykucuatwindowslivedotcom Script Download:...

phpNagios 1.2.0 (menu.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= phpNagios 1.2.0 menu.php Local File Inclusion Vulnerability =============================================================...

Kingcms 0.6.0 Remote File Inclusion

------------------------------------------------------------------------------------- Kingcms v0.6.0 menu.php Remote File Inclusion Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail: uykucuatwindowslivedotcom Script Download:...

Kingcms 0.6.0 (menu.php) Remote File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------------- Kingcms v0.6.0 menu.php Remote File Inclusion Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail:...