4796 matches found
VWar Path Disclosure
SUMMARY : VWar is is a clan management system. It stores all clan members details. Logs match results and keeps track of upcomming matches. Using the links under the Vwar menu, you can view all clan members, view upcomming matches, view previous results, view clan statistics and members can log...
Scry Gallery XSS Vulnerability
Software : Scry Gallery v1.1 WebSite :http://scry.org/ ISSUE : The software is prone to a XSS attack using the following proof of concept : http://anysiteusingscrygallery.com/Path to scry gallery/index.php?v=list&i=0&p=scriptvar20variable=111111111111111111;alertvariable;/script One can execute...
Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites
Software : Scry Gallery WebSite :http://scry.org/ discovred by :Moroccan Security Team + Directory Traversal : A remote attacker may employ directory traversal strings '../' to access arbitrary files outside of the webroot directory. This flaw is due to an input validation error in the "index.php...
CVE-2006-1956
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message...
AWStats 6.5.x multiple vuln.
AWStats 6.5.x multiple vuln. Vuln. discovered by : r0t Date: 20 april 2006 vendorlink:http://awstats.sourceforge.net/ affected versions: 6.5 build 1.857 and prior orginal advisory: http://pridels.blogspot.com/2006/04/awstats-65x-multiple-vuln.html Vuln. Description: 1. Cross-Site Scripting AWStat...
Mambo <= 4.5.3 , Joomla <=1.0.7 (feed) Denial of Service Exploit
Exploit for unknown platform in category web applications ================================================================ Mambo Mambo/Joomla Remote DOS Exploit Mambo/Joomla Path Disclosure & IIS Server-isapi mod Remote Denial Of Service by trueend5 Computer Security Science Researchers Institute...
Joomla! 1.0.7 Mambo 4.5.3 - feed Full Path Disclosure Denial of Service
Joomla! 1.0.7 Mambo 4.5.3 - feed Full Path Disclosure Denial of Service Mambo/Joomla Remote DOS Exploit Mambo/Joomla Path Disclosure & IIS Server-isapi mod Remote Denial Of Service by trueend5 Computer Security Science Researchers Institute KAPDA hostname ex: www.sitename.com/sp...
AWStats 6.5 vuln.
AWStats 6.5 vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://awstats.sourceforge.net affected versions:AWStats 6.5 build 1.857 and previous orginal advisory:http://pridels.blogspot.com/2006/04/awstats-65-vuln.html Vuln. Description: AWStats contains a flaw that allows a remot...
[KAPDA::#41] - Mambo/Joomla rss component vulnerability
KAPDA New advisory Mambo website : http://www.mamboserver.com Bug: Path Disclosure & Remote Denial Of Service Exploitation: Remote with browser Exploit: available Description: -------------------- Mambo is a feature-rich dynamic portal engine/content management tool capable of building sites from...
Joomla! 1.0.7 / Mambo 4.5.3 - 'feed' Full Path Disclosure / Denial of Service
Mambo/Joomla Remote DOS Exploit Mambo/Joomla Path Disclosure & IIS Server-isapi mod Remote Denial Of Service by trueend5 Computer Security Science Researchers Institute KAPDA hostname ex: www.sitename.com f...
CVE-2006-1809
index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message...
xFlow v5.x multiple vuln.
xFlow v5.x multiple vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://www.skymarx.com/affiliatesoftware.html affected versions:v5.46.11 and previous orginal advisory: http://pridels.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html Product info: After over five years of...
DbbS<=2.0-alpha Multiple Vulnerabilities
Special thanks to rgod for his help!!! Full path disclosure http://www.site.com/DbbS/topics.php?fcategoryid=' http://www.site.com/DbbS/script.php?unavariabile= http://www.site.com/DbbS/script.php?GLOBALS= http://www.site.com/DbbS/script.php?SERVER= MD5 Password...
Farsinews Cross-Site Scripting & Path disclosure vulnerability
Farsinews Cross-Site Scripting & Path disclosure vulnerability ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' Aria-Security.net Advisory Discovered by:R@1D3N amin emami [email protected] Gr33t to:A.u.r.a & O.u.t.l.a.w & Smok3...
TalentSoft Web+Shop Path Disclosure
TalentSoft Web+Shop Path Disclosure Software: Web+Shop Version: 5.3.6 Website: http://www.webplus.com Bug: path disclosure Exploitation: Remote Description: Web+Shop is a user-friendly e-commerce shopping cart application for the web. Vulnerability: Web+Shop installation path can be disclosed by...
SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else...
Directory traversal
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values...
CVE-2006-1762
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values...
CVE-2006-1762
CVE-2006-1762 affects blur6ex 0.3.452, with a directory traversal flaw in index.php via the shard parameter that allows remote file includes and can lead to reflected XSS and path disclosure as noted in the NVD description. The connected records confirm the same vulnerability details; no explicit...
CVE-2006-1762
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values...