CVE-2007-4259

EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via 1 a direct request for a URL under OnlineViewing/galleries/ or 2 navigation of the gallery user interface with JavaScript disabled...

stored XSS vulnerability in app/themes/leftnavigation/configuretheme.action

Description: Stored XSS via page app/themes/leftnavigation/configuretheme.action?key= Exploit: Example value in the Naviagtion Page field: "aletrdocument.cookiex x="...

Microsoft Internet Explorer content spoofing

It's possiblt to emulate navigation to different site by using document.open, actually stayin in context of previous page...

[Full-disclosure] Papoo CMS 3.6 - SQL Injection

Papoo Content Management System Backend SQL Injection Jun 24 2007 Product Papoo Content Management System Vulnerable Versions Papoo 3.6 and maybe prior Vendor Status The Vendor was notified and the issue was fixed. A patch is available at http://www.papoo.de/index/menuid/204/reporeid/215 Details...

Microsoft Windows Vista - Windows Mail Local File Execution

Microsoft Windows Vista - Windows Mail Local File Execution source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker mu...

Microsoft Windows Vista - Windows Mail Local File Execution

source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link...

CVE-2007-1499: Improper Neutralization of Input During Web Page Generation

Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a res: URI to navcancl.htm with an arbitrary URL as an argument, which displays the URL in the location bar of the "Navigation Canceled" page and...

CVE-2007-1091

Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via onUnload Javascript handlers...

Yahoo! Messenger远程搜索字符串任意浏览导航漏洞

Yahoo! Messenger是一款流行的即时通信软件。 Yahoo! Messenger不正确处理恶意消息，远程攻击者可以利用漏洞在目标用户浏览器上打开浏览器窗口到任意页面。 发送如下私有消息给目标用户： :+-%/?=/;@$@;+?/?@@-?@+@;?msg:---------------------------------------------embed onload=window.open'http:\\google.com/'helomsg...

Microsoft Windows Internet Explorer插件导航地址栏伪造漏洞(MS04-038)

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理插件导行时存在问题，远程攻击者可以利用这个漏洞伪造地址，欺骗用户。 此漏洞可导致攻击者可以把不正确的URL列在地址栏中，而非实际用户要访问的URL，造成一定的欺骗，可能导致用户访问恶意站点，泄露敏感信息。 Microsoft Internet Explorer 6.0SP1 Microsoft Internet Explorer 5.5SP2 Microsoft Internet Explorer 5.0.1SP4 Microsoft Interne...

phpGreetz Remote File Inclusion Vulnerability

Author: [email protected] mozi phpGreetz Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org Greetz: SpiderZ , fUSiON ---------------------------------------------------------------- Download: http://sourceforge.net/project/showfiles.php?groupid=6127...

phpGreetz <= 0.99 (footer.php) Remote File Include Vulnerability

No description provided by source. Author: [email protected] mozi phpGreetz Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org Greetz: SpiderZ , fUSiON ---------------------------------------------------------------- Download:...

PHPGreetz 0.99 - footer.php Remote File Inclusion

PHPGreetz 0.99 - footer.php Remote File Inclusion Author: [email protected] mozi phpGreetz Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org Greetz: SpiderZ , fUSiON ---------------------------------------------------------------- Download:...

PHPGreetz 0.99 - 'footer.php' Remote File Inclusion

Author: [email protected] mozi phpGreetz Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org Greetz: SpiderZ , fUSiON ---------------------------------------------------------------- Download: http://sourceforge.net/project/showfiles.php?groupid=6127...

A-Blog.txt

1A-Blog Remote File Include BuG FounD by Drago84 Application Affect:2A-Blog Source Code: 3http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir : /navigate/ Exempe Of ExPloit is:...

CVE-2006-5135: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 openbox, 2 middlebox, and 3 closebox parameters in a sources/myaccount.php; the 4 navigationend parameter in b navigation/search.php and c navigation/donation.php...

CVE-2006-5092: Undefined Security Weakness

PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigationstart parameter...

A-Blog v2.0 Remote File Include

============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...

A-Blog 2.0 Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= A-Blog 2.0 Multiple Remote File Include Vulnerabilities =======================================================...

A-Blog 2.0 - Multiple Remote File Inclusions

A-Blog 2.0 - Multiple Remote File Inclusions ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous...