EUVD-2006-2391

Malware in sbrugna...

EUVD-2008-0445

Malware in sbrugna...

EUVD-2006-4078

Malware in sbrugna...

OZJournals 1.5 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/19311/info OZJournal is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary HTML and script...

OZJournals 1.2 Vname Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17954/info OZJournals is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

CVE-2008-0435

Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary files via a .. dot dot in the id parameter in a printpreview action...

Directory traversal

Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary files via a .. dot dot in the id parameter in a printpreview action...

CVE-2008-0435

Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary files via a .. dot dot in the id parameter in a printpreview action...

CVE-2008-0435

CVE-2008-0435 concerns OZJournals 2.1.1 where a directory traversal flaw in index.php permits reading portions of arbitrary files via a .. sequence in the id parameter during a printpreview action. The vulnerability arises from improper validation of the id input, enabling an attacker to traverse...

CVE-2008-0435: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary files via a .. dot dot in the id parameter in a printpreview action...

ozjournals-disclose.txt

Name: OZJournals 2.1.1 Webiste: http://www.aqonlinenetworks.com/ Vulnerability type: Local File Exposure Author: shinmai, 2008-01-21 Description: OZJournals uses .php-files as it's storage, and posts are read from them with the getcontents-function. This protects from traditional LFI-exploits, bu...

OZJournals 2.1.1 (id) File Disclosure Vulnerability

No description provided by source. Name: OZJournals 2.1.1 Webiste: http://www.aqonlinenetworks.com/ Vulnerability type: Local File Exposure Author: shinmai, 2008-01-21 Description: OZJournals uses .php-files as it's storage, and posts are read from them with the getcontents-function. This protect...

OZJournals 2.1.1 - id File Disclosure

OZJournals 2.1.1 - id File Disclosure Name: OZJournals 2.1.1 Webiste: http://www.aqonlinenetworks.com/ Vulnerability type: Local File Exposure Author: shinmai, 2008-01-21 Description: OZJournals uses .php-files as it's storage, and posts are read from them with the getcontents-function. This...

OZJournals 2.1.1 (id) File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================== OZJournals 2.1.1 id File Disclosure Vulnerability =================================================== Name: OZJournals 2.1.1 Webiste: http://www.aqonlinenetworks.com/ Vulnerability type:...

OZJournals 2.1.1 - 'id' File Disclosure

Name: OZJournals 2.1.1 Webiste: http://www.aqonlinenetworks.com/ Vulnerability type: Local File Exposure Author: shinmai, 2008-01-21 Description: OZJournals uses .php-files as it's storage, and posts are read from them with the getcontents-function. This protects from traditional LFI-exploits, bu...

CVE-2006-4086

The CVE-2006-4086 entry concerns Elaine Aquino Online Zone Journals (OZJournals) 1.5. The vulnerability is a cross-site scripting (XSS) flaw in index.php where an attacker can inject arbitrary web script or HTML via the keywords parameter. The affected component is OZJournals 1.5’s index.php, wit...

CVE-2006-4086: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Elaine Aquino Online Zone Journals OZJournals 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-4069

Multiple cross-site scripting XSS vulnerabilities in Elaine Aquino Online Zone Journals OZJournals 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 m and 2 c parameters in index.php, 3 a search action, and 4 a "submit comment" action...

CVE-2006-4069

CVE-2006-4069 describes multiple cross-site scripting (XSS) vulnerabilities in Elaine Aquino Online Zone Journals (OZJournals) 1.5. The issues occur in the web app via the parameters (1) m, (2) c in index.php, (3) a search action, and (4) a "submit comment" action, enabling remote attackers to in...

CVE-2006-4069

Multiple cross-site scripting XSS vulnerabilities in Elaine Aquino Online Zone Journals OZJournals 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 m and 2 c parameters in index.php, 3 a search action, and 4 a "submit comment" action...