Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to 1 settings.php or 2 cat.php. NOTE: certain parameter values also trigger path disclosure...

CVE-2007-2669

Multiple cross-site scripting XSS vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to 1 settings.php or 2 cat.php. NOTE: certain parameter values also trigger path disclosure...

CVE-2007-1901

SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...

[Full-disclosure] SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 18 SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the...

[Full-disclosure] MyBB version 1.2.4 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 17 MyBB version 1.2.4 Multiple Path Disclosure Vulnerabilities Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles...

Advanced Guestbook index.php lang Cookie Parameter Path Disclosure

The remote host is running Advanced Guestbook, a free guestbook written in PHP. The installed version of Advanced Guestbook fails to validate input to the 'lang' cookie before using it as a language template. An unauthenticated, remote attacker may be able to exploit these issues to view arbitrar...

Advanced Guestbook version 2.4.2 Multiple Error Information Leak Vulnerabilities

netVigilance Security Advisory 11 Advanced Guestbook version 2.4.2 Multiple Error Information Leak Vulnerabilities Description: Advanced Guestbook is a PHP-based guestbook script. It includes many useful features such as preview, templates, e-mail notification, picture upload, page spanning , htm...

Persism CMS 0.9.2 system[path] Remote File Inclusion Vulnerabilities

No description provided by source. Persism Content Management System = 0.9.2 Multiple Remote File Inclusion Vulnerabilities D.Script: http://www.persism.com/emil/0.9.2/0.9.2.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc...

PHPChain vuln.

PHPChain vuln. Vuln. discovered by : r0t Date: 2 May 2007 vendor:http://www.globalmegacorp.org/PHPChain/ affected versions: 1.0 and previous orginal advisory:http://pridels.blogspot.com/2007/05/phpchain-vuln.html PHPChain contains a flaw that allows a remote Cross-Site Scripting attacks.Input...

CVE-2007-2253

Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for 1 sdk/blanks/formcontrol.php and 2 sdk/blanks/filemodules.php...

Design/Logic Flaw

admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module parameter...

CVE-2007-2250

admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module parameter...

lwphpbb2-rfi.txt

------=Part5959220650484.1177339131270 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info LWphpBB2 Version: 0.4c Problem: Full path...

cm4p-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info website: http://www.mariovaldez.net cms: cm4p Version: 0.6.1 Download: http://www.mariovaldez.net/software/cm4p/files/cm4p0.6.1.zip Problem: Include file bug: includeonce $pathpre . "cm/cmanon.inc.php";...

metabb-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info cms: metabb Version: 6 Download:http://www.hotscripts.com/jump.php?listingid=61127&jumptype=1 Problem: Include file bug: includeonce$phprootpath . 'rabbitoshi/includes/functionsrabbitoshicron. Vuls 1.Full...

modx-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe:http://www.silitoad.org Powered By Silitoad From Arabian-Fighterz Info Website: http://modxcms.com/ Version: 0.9.5 Download: http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=modx-0.9.5.zip Problem: Full path...

Phorum 5.1.20 - 'admin.php?module[]' Full Path Disclosure

source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...

exponent-multi.txt

Exponent Multiple Vulnerabilities Exponent is a fully-featured, modern CMS written in PHP, that enables non-technical people to manage and update their websites with minimal effort. Exponent is also an attractive development platform for traditional and non-traditional web applications. it's grea...

fsbchat09-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe:http://www.Arabian-FighterZ.com Powered By Silitoad From Arabian-Fighterz Info Website: http://www.zoneur.com Version: 0.9 Download: http://pub.zoneur.com/script/php/fsb/fsbchat/fsbchat-0.9.rar Problem: Include file bug: includeonce $racine...

UseBB Version 1.0.4 Path Disclosure Vulnerability

netVigilance Security Advisory 16 UseBB Version 1.0.4 Path Disclosure Vulnerability Description: UseBB is an Open Source forum package developed in PHP and using the popular MySQL database back-end to store data. Unlike other popular forum systems, UseBB does not strive to have as many features a...