121 matches found
exploit-NPDS-5.10.txt
?php /---------------------------------------------------------\ NPDS = 5.10 - Remote Code Execution exploit |Description:| Security holes were found in NPDS 5.10. N°1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No check is carried out on nicknames or Id which can allow an...
NPDS <= 5.10 - Multiple SQL injections
|Description:| Security holes were found in NPDS 5.10. N°1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No check is carried out on nicknames or Id which can allow an attacker to modify a SQL request so as to obtain data. N°2: SQL Injection due to a bad use of "XFORWARDEDFOR" file...
Net Portal Dynamic System (NPDS) 5.10 Remote Code Execution (2)
No description provided by source. ?php /--------------------------------------------------------- NPDS = 5.10 - Remote Code Execution exploit |Description:| Security holes were found in NPDS 5.10. N掳1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No check is carried out on...
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution (2)
Exploit for unknown platform in category web applications ================================================================== Net Portal Dynamic System NPDS = 5.10 Remote Code Execution 2 ================================================================== ?php...
Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (2)
?php /---------------------------------------------------------\ NPDS = 5.10 - Remote Code Execution exploit |Description:| Security holes were found in NPDS 5.10. N°1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No check is carried out on nicknames or Id which can allow an...
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution (2)
No description provided by source. ?php /---------------------------------------------------------\ NPDS = 5.10 - Remote Code Execution exploit |Description:| Security holes were found in NPDS 5.10. N°1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No check is carried out on...
Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (2)
Net Portal Dynamic System NPDS 5.10 - Remote Code Execution 2 ?php /---------------------------------------------------------\ NPDS = 5.10 - Remote Code Execution exploit |Description:| Security holes were found in NPDS 5.10. N°1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No...
CVE-2007-1634
Variable extraction vulnerability in grabglobals.php in Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the FILESDBtmpname parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation...
CVE-2007-1634
Variable extraction vulnerability in grabglobals.php in Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the FILESDBtmpname parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation...
CVE-2007-1635
CVE-2007-1635 describes a static code injection in Net Portal Dynamic System (NPDS)
CVE-2007-1635: Undefined Security Weakness
Static code injection vulnerability in admin/settings.php in Net Portal Dynamic System NPDS 5.10 and earlier allows remote authenticated users to inject arbitrary PHP code via the xtop parameter in a "ConfigSave" op to admin.php, which can later be accessed via a "Configure" op to admin.php...
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution
No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; Advisory soon if$argc 3 print" TITLE | Net Portal Dynamic System NPDS = 5.10 Remote Code Execution 0day AUTHOR | DarkFig / http://www.acid-root.new.fr / [email protected] NOTE | Works regardless of php settings...
CVE-2006-2950
Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 header.php, 2 contact.php, or 3 forumextender.php, which reveals the path in an error message...
CVE-2006-2951
CVE-2006-2951 concerns multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS)
CVE-2006-2950
Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 header.php, 2 contact.php, or 3 forumextender.php, which reveals the path in an error message...
CVE-2006-2950
NPDS 5.10 and earlier is affected. An information-disclosure vulnerability allows remote attackers to obtain sensitive information by directly requesting one of three PHP files (header.php, contact.php, forum_extender.php), causing an error message that reveals file paths. The issue is a disclosu...
CVE-2006-2950: Exposure of Sensitive Information to an Unauthorized Actor
Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 header.php, 2 contact.php, or 3 forumextender.php, which reveals the path in an error message...
CVE-2006-2952: Undefined Security Weakness
Directory traversal vulnerability in Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the 1 DefaultTheme parameter to header.php or 2 ModPath parameter to modules/cluster-paradise/cluster-E.php...
NPDS 5.10 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/18383/info NPDS is prone to multiple input-validation issues, including information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A successful exploit of...
NPDS 5.10 - Multiple Input Validation Vulnerabilities
NPDS 5.10 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18383/info NPDS is prone to multiple input-validation issues, including information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly...