4338 matches found
MailPost vulnerable to cross-site scripting via an executable requested with a trailing slash appended to the filename
Overview A cross-site scripting vulnerability is reported to exist in MailPost version 5.1.1sv and possibly earlier versions. Description According to a report by ProCheckUp, MailPost is vulnerable to a Cross-Site Scripting attack by adding a trailing '/' character to the executable filename. The...
mp-ldu.txt
Multiple SQL-injections in Land Down Under v701 Date: 30.10.04 Application: Land Down Under v701 Platform: PHP Severity: Medium Link: http://www.neocrome.net Vendor Status Vulnerabilities have been fixed. Details An input validation vulnerability was reported in Land Down Under v701. A remote use...
cht-security.txt
CHT Security Research Center-2004 http://www.CyberSpy.Org Turkey Software: CoolPHP Web Site: http://cphp.sourceforge.net/ Affected Versions: 1.0-stable Description: CoolPHP is a PHP based portal system.It requires A Web server with PHP=PHP4 support and MySQL. It's compatible with NIX and NT...
Multiple Vulnerabilities in CoolPHP
CHT Security Research Center-2004 http://www.CyberSpy.Org Turkey Software: CoolPHP Web Site: http://cphp.sourceforge.net/ Affected Versions: 1.0-stable Description: CoolPHP is a PHP based portal system.It requires A Web server with PHP=PHP4 support and MySQL. It's compatible with NIX and NT...
a path disclosure and a posibility file inclusion and vulneability in thepeak file upload v1.3
JustinT NT - Undernet [email protected] hi, there is a posiblity path disclosure and run commands on a server usint thepeak File Upload v1.3 searching for /fileupload/index.php an attacker can upload a malicious jpg of gif and can execute commands or make a file inclusion, but it cant be...
phplinks2.txt
In-Reply-To: Hi, This is also a php inclusion bug. You can include any .php script on remote system with "PHP Links". Request like this will include script "execute.php" in "/some/some" directory: www.site.com/phplinks/index.php?show=../../../../../../some/some/execute So, if you have FTP access ...
Multiple vulnerabilities in ZanfiCmsLite
AuThor:Cracklove emA!l:CrackloveatGmaildotCom HoMePaGe:http://ProxySky.com Info Website: http://www.zanfi.nl Version: 1.1,The Newest Version Problem: Full path disclosure,Include file Vuls 1.Full path disclosure: Let's try to request like this: http://localhost/cms/admpages.php and we get standar...
blackboard.txt
Multiple vulnerabilities in BlackBoard AuThor:Cracklove emA!l:CrackloveatGmaildotCom HoMePaGe:http://ProxySky.com Info Website: http://blackboard.unclassified.de Version: 1.5.1,Maybe prior Problem: Full path disclosure,Include file Vuls 1.Full path disclosure: Let's try to request like this:...
Full path disclosure and sql injection on CubeCart 2.0.1
-------------------------------------------------------- Full path disclosure and sql injection on CubeCart 2.0.1 -------------------------------------------------------- 1Introduction 2The Problem 3The Solution 4Timeline 5Feddback 1Introduction "CubeCart is an eCommerce script written with PHP &...
Multiple vulnerabilities in BlackBoard
Multiple vulnerabilities in BlackBoard AuThor:Cracklove emA!l:CrackloveatGmaildotCom HoMePaGe:http://ProxySky.com Info Website: http://blackboard.unclassified.de Version: 1.5.1,Maybe prior Problem: Full path disclosure,Include file Vuls 1.Full path disclosure: Let's try to request like this:...
Echo Security Advisory 2004.7
ECHOADV07$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in AJ-Fork --------------------------------------------------------------------------- Author: y3dips Date: September, 23th 2004 Location: Indonesia, Jakarta Web:...
Full path disclosure in PHP Links
Nkxtox Advisory 0000-00003 Full path disclosure in PHP Links Date: 03/10/04 Bug: http://server/phplinks/index.php?show=juax0rx Warning: maininclude/juax0rx.php: failed to open stream: No such file or directory in /home/h4x0rsit3/b0x/phplinks/index.php on line 198 Warning: main: Failed opening...
Multiple Vulnerabilities in AJ-Fork
ECHOADV07$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in AJ-Fork --------------------------------------------------------------------------- Author: y3dips Date: September, 23th 2004 Location: Indonesia, Jakarta Web:...
Multiple vulnerabilities in ActivePost Standard 3.1
Luigi Auriemma Application: ActivePost Standard http://www.activepost.net Versions: = 3.1 Platforms: Windows Bugs: - File-Server crash - File-server directory traversal and path disclosure - conference password disclosure Risk: critical Exploitation: remote, versus server only the third bug affec...
TUTOS < 1.1.20040412 Multiple Input Validation Issues
The remote host is running Tutos, an open source team organization software package written in PHP. According to its banner, the remote version of this software is vulnerable to multiple input validation flaws that could allow an authenticated user to perform a cross-site scripting attack, path...
bbsEMarket.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20040915-07 BBS E-Market Professional multiple vulnerabilities Revision 1.0 Date Published: 2004-09-15 KST Last Update: 2004-09-15 Disclosed by SSR Team [email protected] Abstract ======== BBS E-MarketBobusang in Kore...
FUll Path Disclosure in YABBSE
ECHOADV05$2004 --------------------------------------------------------------------------- FUll Path Disclosure in YABBSE --------------------------------------------------------------------------- Author: y3dips Date: August, 25th 2004 Location: Indonesia, Jakarta Web:...
CVE-2003-0051
CVE-2003-0051 affects Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1, where parse_xml.cgi can reveal the server installation’s physical path via a NULL file parameter. The issue enables remote access to sensitive path information and is part of a set of re...
CVE-2002-1132
SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script...