MKPortal M1.1.1 (Urlobox) Cross Site Request Forgery Vulnerability

No description provided by source. MkPortal Urlobox Cross Site Request Forgery Discovered by: Demential Web: http://www.burnhead.it E-mail: [email protected] Mkportal website: http://www.mkportal.it posting img?ind=urlobox&op=delete&idurlo=X/img in MkPortal urlobox where X is an ID of a message,...

MKPortal M1.1.1 - 'Urlobox' Cross-Site Request Forgery

MkPortal Urlobox Cross Site Request Forgery Discovered by: Demential Web: http://www.burnhead.it E-mail: [email protected] Mkportal website: http://www.mkportal.it posting img?ind=urlobox&op=delete&idurlo=X/img in MkPortal urlobox where X is an ID of a message, when administrator opens urlobox pag...

MkPortal Urlobox Cross Site Request Forgery

MkPortal Urlobox Cross Site Request Forgery Discovered by: Demential Web: http://www.burnhead.it E-mail: [email protected] Mkportal website: http://www.mkportal.it posting img?ind=urlobox&op=delete&idurlo=X/img in MkPortal urlobox where X is an ID of a message, when administrator opens urlobox pag...

CVE-2006-5139

Unspecified vulnerability in MkPortal allows remote attackers to corrupt web site content, and possibly have other impact, via a certain long Message that affects "Tables," related to the Urlobox...

CVE-2006-5139

Unspecified vulnerability in MkPortal allows remote attackers to corrupt web site content, and possibly have other impact, via a certain long Message that affects "Tables," related to the Urlobox...

CVE-2006-5139

Technical details for CVE-2006-5139 are not publicly available in the provided documents. No specific affected product versions, root cause, impact, or remediation are disclosed here; monitor for updates.

CVE-2006-5139: Undefined Security Weakness

Unspecified vulnerability in MkPortal allows remote attackers to corrupt web site content, and possibly have other impact, via a certain long Message that affects "Tables," related to the Urlobox...

MkPortal Cross Site Scripting (All versions) xSS

By: HanowarS mail: vannovaxatgmail.com Greetz: Nettoxic, Antrax, Fr34k, SSH-2, xarnuz web: www.div.com.ve and www.c-group.org ALL VERSIONS!! Latin American Defacers Dork: MKPortal M1.1 Rc1 ©2003-2005 All rights reserved Hilo:...

MKPortal 1.01.1 - PMPopup.php Cross-Site Scripting

MKPortal 1.01.1 - PMPopup.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20232/info MKPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execut...

MKPortal 1.0/1.1 - 'PMPopup.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20232/info MKPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...

CVE-2006-4665

Cross-site scripting XSS vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHPSELF variable. NOTE: Some details are obtained from third party information...

CVE-2006-4665: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHPSELF variable. NOTE: Some details are obtained from third party information...

CVE-2006-4665

Cross-site scripting XSS vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHPSELF variable. NOTE: Some details are obtained from third party information...

CVE-2006-4665

The CVE-2006-4665 issue affects MKPortal M1.1 Rc1, where the index.php script is vulnerable to cross-site scripting via the ind parameter, likely related to PHP_SELF. The underlying mechanism is an XSS in user-controllable input that can inject arbitrary script/HTML. Exploitation details (availab...

mkportalXSS-M11.txt

xxs in MKPortal M1.1 Rc1 info: file:index.php google======MKPortal M1.1 Rc1 ©2003-2005 Exp: http://www.sitename.com/index.php?ind="alert1; -------------------------------------- By Crackman Thank to all friend in www.lezr.com/vb...

CVE-2006-3554

CVE-2006-3554 affects MKPortal 1.0.1 Final and is a directory traversal vulnerability in index.php. The underlying flaw allows remote attackers to include and execute arbitrary local files by manipulating directory traversal sequences in the language cookie, demonstrated by injecting PHP sequence...

CVE-2006-3554

Directory traversal vulnerability in index.php in MKPortal 1.0.1 Final allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language cookie, as demonstrated by using a glsession cookie to inject PHP sequences into the error.log file, which ...

CVE-2006-3554: Undefined Security Weakness

Directory traversal vulnerability in index.php in MKPortal 1.0.1 Final allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language cookie, as demonstrated by using a glsession cookie to inject PHP sequences into the error.log file, which ...

[SA20884] MKPortal "ind" Local File Inclusion Vulnerability

---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...

WD-MKP.txt

!/usr/bin/perl -w MKPortal 1.0.1 Final index.php File Include Vulnerability Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - BlackWHITE - r3v3ng4ns - Net^ViruS Details ======= Note : MKPortal 1.0.1 Final index.php File Include Vulnerability .$ind =...