113 matches found
CVE-2007-6541
Multiple cross-site scripting XSS vulnerabilities in neuron news 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the topic parameter in a viewtopic action, or the 2 newsyear or 3 newsmonth parameter in a newsarchive action to the default URI in patch/...
CVE-2007-6541: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in neuron news 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the topic parameter in a viewtopic action, or the 2 newsyear or 3 newsmonth parameter in a newsarchive action to the default URI in patch/...
CVE-2007-6540: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q parameter to the default URI in patch/...
neuron news1.0 Multiple Remote Vulnerabilities (sql injection/xss)
...:::::neuron news1.0 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security team hadihadi & black.shadowes --------------------------------- special tnx to:MR.nosrati,MR.hesy,satan,Zahra & all...
neuron-multi.txt
...:::::neuron news1.0 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security team hadihadi & black.shadowes --------------------------------- special tnx to:MR.nosrati,MR.hesy,satan,Zahra & all...
Neuron News 1.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/26896/info Neuron News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and two cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attack...
Neuron News 1.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities
Neuron News 1.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26896/info Neuron News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and two cross-site scripting issues, because it fails to...
neuron-lfi.txt
\|/// \ - - // Y! Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Neuron News 1.0 Download : http://downloads.localhost.be/scripts/neuronnews.zip Author : Dj7xpl HomePage : http://r00t.ir / http://Dj7xpl.2600.ir Type : Local File Inclusion...
CVE-2007-5050
Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the q parameter...
Directory traversal
Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the q parameter...
CVE-2007-5050
The CVE-2007-5050 entry describes a directory traversal in Neuron News 1.0: index.php vulnerable to a ".." in the q parameter, permitting remote attackers to include and execute arbitrary local files. Affected software: Neuron News 1.0 (PHP). Root cause is improper input validation on q that perm...
Neuron News 1.0 Local file inclusion (index.php)
+++++++++++++++++++++++++++++++++++++++++++ Neuron News 1.0 Local File inclusion +++++++++++++++++++++++++++++++++++++++++++ Founded By Seph1roth http://blackroots.it Vulnerable Script Download: http://downloads.localhost.be/scripts/neuronnews.zip Bug : http://TARGET/PATH/index.php?q=Local File00...
CVE-2007-5050: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the q parameter...
CVE-2007-5050
Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the q parameter...
neuron news 1.0 (index.php q) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ neuron news 1.0 index.php q Local File Inclusion Vulnerability ================================================================ \|/// \ - - // Y! Underground Group @ @...
neuron news 1.0 - 'index.php?q' Local File Inclusion
\|/// \ - - // Y! Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Neuron News 1.0 Download : http://downloads.localhost.be/scripts/neuronnews.zip Author : Dj7xpl HomePage : http://r00t.ir / http://Dj7xpl.2600.ir Type : Local File Inclusion...
neuron news 1.0 (index.php q) Local File Inclusion Vulnerability
No description provided by source. |/// \ - - // Y! Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Neuron News 1.0 Download : http://downloads.localhost.be/scripts/neuronnews.zip Author : Dj7xpl HomePage : http://r00t.ir / http://Dj7xpl.2600.ir...
neuron news 1.0 - index.php?q Local File Inclusion
neuron news 1.0 - index.php?q Local File Inclusion \|/// \ - - // Y! Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Neuron News 1.0 Download : http://downloads.localhost.be/scripts/neuronnews.zip Author : Dj7xpl HomePage : http://r00t.ir /...
Unrestricted file upload
Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload and execute arbitrary PHP files in uploads/...