EUVD-2008-5741

Malware in sbrugna...

EUVD-2008-5740

Malware in sbrugna...

php weather 2.2.2 (lfi/xss) Multiple Vulnerabilities

No description provided by source. Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . /output/pwtext$language.php; xpl:...

CVE-2008-5770

Cross-site scripting XSS vulnerability in config/makeconfig.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-5771

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

Directory traversal

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in config/makeconfig.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-5771

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

CVE-2008-5771

CVE-2008-5771 describes a directory traversal vulnerability in test.php of PHP Weather 2.2.2. The language parameter can be manipulated to trigger directory traversal, enabling remote attackers to include and execute arbitrary local files. This represents a potential server-side impact on affecte...

CVE-2008-5770: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in config/makeconfig.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-5771: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

PHP Weather 2.2.2 (LFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl:...

PHP Weather 2.2.2 LFI / XSS

Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl: www.site.com/path/test.php?metar=&language=Lfi%00...

PHP weather 2.2.2 - Local File Inclusion Cross-Site Scripting

PHP weather 2.2.2 - Local File Inclusion Cross-Site Scripting Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl:...

PHP Weather 2.2.2 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== PHP Weather 2.2.2 LFI/XSS Multiple Remote Vulnerabilities =========================================================== Lfi/xss script: phpweather-2.2.2 download...

PHP weather 2.2.2 - Local File Inclusion / Cross-Site Scripting

Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl: www.site.com/path/test.php?metar=&language=Lfi%00...