4338 matches found
Jupiter CMS Multiple injections
Hello,, Jupiter CMS Sql injections ,full path and xss vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] if magicquotesgpc = off login with user name : ' or id=1/ or ' or authorization = 4/ you will be loged in...
CVE-2006-4837
CVE-2006-4837 affects DCP-Portal SE 6.0. The issue is described as multiple PHP remote file inclusion vulnerabilities allowing an attacker to execute arbitrary PHP code via a URL in the root parameter of two scripts: library/lib.php and library/editor/editor.php. A related behavior can trigger fu...
DEBIAN-CVE-2006-4743
WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for 1 404.php, 2 akismet.php, 3 archive.php, 4 archives.php, 5 attachment.php, 6 blogger.php, 7 comments.php, 8 comments-popup.php, 9 dotclear.php, 10 footer.php, 11 functions.php, 12...
CVE-2006-4754
Cross-site scripting XSS vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that revea...
CVE-2006-4754
PHProg before 1.1 has a Cross-site Scripting (XSS) flaw in index.php, exploitable via the album parameter used in an opendir call. The same issue can enable full path disclosure with an invalid album value that reveals the installation path in error messages. Affected software: PHProg versions pr...
CVE-2006-4743
CVE-2006-4743 affects WordPress 2.0.2 through 2.0.5, allowing remote attackers to obtain sensitive information by requesting specific PHP files (e.g., 404.php, akismet.php, archive.php, etc.), which causes error messages that reveal internal paths. The connected documents corroborate the list of ...
CVE-2006-4752
The CVE-2006-4752 entry affects Laurentiu Matei’s eXpandable Home Page (XHP) CMS 0.5.1. The vulnerability arises in the engine module where an invalid action parameter allows remote attackers to obtain the installation path. No exploit details or specific versions beyond 0.5.1 are provided in the...
CVE-2006-4754
Cross-site scripting XSS vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that revea...
PHProg.txt
------=Part387718013116.1157965429026 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline 11/09/06 Produit vuln=E9rable : PHProg Album photo en PHP Site officiel du produit : http://www.PHProg.com/ Failles de...
jetboxCMSSQL.txt
Hello,, Multible Injections in Jetbox CMS Discovered By : HACKERS PAL & mohajali Copy rights : HACKERS PAL & mohajali Website : http://www.soqor.net Email Address : [email protected] This Contains multible injections and vulnerabilities in Jetbox CMS // sql injections if magicquotesgpc = off...
PT-2006-5529 · Phprog · Phprog
Name of the Vulnerable Software and Affected Versions: PHProg versions prior to 1.1 Description: The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the album parameter in index.php, which is us...
[Full-disclosure] PHProg : Local File Inclusion + XSS + Full path disclosure
11/09/06 Produit vulnerable : PHProg Album photo en PHP Site officiel du produit : http://www.PHProg.com/ Failles de securite decelees : 1 Full path disclosure : http://localhost/PHProg/?id=1&album=cdg393 2 Cross Site Scripting XSS : http://localhost/PHProg/?id=1&album= scriptalert'cdg393'/script...
CVE-2006-4633
index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...
wpSQL.txt
Version Afected: v2.0.5 - v2.0.2 For Version v2.0.2 index.php?paged=-25633&header.php?=-id For Version v2.0.5 index.php?paged=/archive/-1-5-2-Create%20Table PATH DISCLOSOURE /wp-settings.php /wp-admin/admin-footer.php /wp-admin/admin-functions.php /wp-admin/edit-form.php...
Sql Injection and Path Disclosoure Wordpress v2.0.5
Version Afected: v2.0.5 - v2.0.2 For Version v2.0.2 index.php?paged=-25633&header.php?=-id For Version v2.0.5 index.php?paged=/archive/-1-5-2-Create20Table PATH DISCLOSOURE /wp-settings.php /wp-admin/admin-footer.php /wp-admin/admin-functions.php /wp-admin/edit-form.php...
softbb01.txt
!/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt Advisory.link.:...
SoftBB 0.1 (cmd) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================= SoftBB 0.1 cmd Remote Command Execution Exploit ================================================= !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code...
SoftBB 0.1 (cmd) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt...
SoftBB 0.1 - 'cmd' Remote Command Execution
!/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt Advisory.link.:...
koobi.txt
vendor:http://www.dream4.de dork:"powered by Koobi Pro 5.6" vuln : http://host/index.php?p=showtopic&toid=SQL http://host/index.php?p=showtopic&toid=XSS Path Disclosure:http://host/index.php?area=1&p=' Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran...