CVE-2008-5338

CVE-2008-5338 is an XSS vulnerability in Bandwebsite (Bandsite portal system) 1.5, exploitable via info.php by passing a crafted section parameter to inject arbitrary script/HTML. The affected component is info.php; root cause is reflected XSS in the section parameter. Reported impact per sources...

PHP-Nuke管理权限泄露

PHP-Nuke Web Portal System存在一个权限确认错误，通过提交一个特殊的URL请求， 远程用户有可能获取管理员权限。 1.0/2.5 升级到PHP-Nuke 3.0: Francisco Burzi PHP-Nuke 2.5: Francisco Burzi upgrade Nuke-3.0.tar.gz http://www.ncc.org.ve/php-nuke.php3?op=download&location=http://download.sourceforge.net/phpnuke&file=PHP-Nuke-3.0.tar.gz Francisco...

Smeego 1.0 (Cookie lang) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ===================================================== Smeego 1.0 Cookie lang Local File Inclusion Exploit ===================================================== Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming &...

PortalApp forums.asp sortby Parameter SQL Injection

The remote host is running PortalApp, a CMS and portal system written in ASP. The version of PortalApp installed on the remote host fails to sanitize input to the 'sortby' parameter of the 'forums.asp' script before using it in a database query. An unauthenticated attacker may be able to exploit...

YNP Portal System 2.2.0 (showpage.cgi p) Remote File Disclosure

Exploit for cgi platform in category web applications =============================================================== YNP Portal System 2.2.0 showpage.cgi p Remote File Disclosure =============================================================== YNP Portal System 2.2.0 showpage.cgi p Remote File...

Directory traversal

Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter...

CVE-2007-4256

Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter...

CVE-2007-4256

CVE-2007-4256 describes a directory traversal vulnerability in showpage.cgi of YNP Portal System 2.2.0. An attacker can read arbitrary files by supplying a ".." in the p parameter, enabling potential exposure of sensitive data. The available documents confirm the affected product/version and the ...

ynp-lfi.txt

YNP Portal System 2.2.0 showpage.cgi p Remote File Disclosure Vulnerability D0RK : inurl:"showpage.cgi?p=popsearch.html" : inurl:"showpage.cgi?p=support.html" : inurl:"showpage.cgi?p=dialup.html" : inurl:"showpage.cgi?p=" POC: http://xxxx.com/showpage.cgi?p=../../../../../../etc/passwd Discovered...

YNP Portal System 2.2.0 - showpage.cgi p Remote File Disclosure

YNP Portal System 2.2.0 - showpage.cgi p Remote File Disclosure YNP Portal System 2.2.0 showpage.cgi p Remote File Disclosure Vulnerability D0RK : inurl:"showpage.cgi?p=popsearch.html" : inurl:"showpage.cgi?p=support.html" : inurl:"showpage.cgi?p=dialup.html" : inurl:"showpage.cgi?p=" POC:...

YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure

YNP Portal System 2.2.0 showpage.cgi p Remote File Disclosure Vulnerability D0RK : inurl:"showpage.cgi?p=popsearch.html" : inurl:"showpage.cgi?p=support.html" : inurl:"showpage.cgi?p=dialup.html" : inurl:"showpage.cgi?p=" POC: http://xxxx.com/showpage.cgi?p=../../../../../../etc/passwd Discovered...

YNP Portal System 2.2.0 (showpage.cgi p) Remote File Disclosure

No description provided by source. YNP Portal System 2.2.0 showpage.cgi p Remote File Disclosure Vulnerability D0RK : inurl:"showpage.cgi?p=popsearch.html" : inurl:"showpage.cgi?p=support.html" : inurl:"showpage.cgi?p=dialup.html" : inurl:"showpage.cgi?p=" POC:...

CVE-2007-2879

Cross-site scripting XSS vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter...

CVE-2007-2879

Cross-site scripting XSS vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter...

CVE-2007-2879

CVE-2007-2879 is an XSS vulnerability in the GNUTurk Portal System 3G (mods.php) that allows remote attackers to inject arbitrary web script or HTML through the month parameter. The underlying issue is unsanitized input in mods.php, enabling script execution in a victim’s browser and partial inte...

GTP 3G © Gnuturk Portal System year=**&month= Cross-Site Scripting Vulnerability

GTP 3G © Gnuturk Portal System ln&year=&month= Cross-Site Scripting Vulnerability Vulnerability: http://www.target.com/mods.php?go=News&p=ln&year=2007&month="h1Vagrant/h1scriptalertdocument.cookie/script Vulnerable: GTP 3G © Gnuturk Portal System Google d0rk: GTP 3G © Gnuturk Portal System Script...

CVE-2007-1293

SQL injection vulnerability in Rigter Portal System RPS 6.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI index.php, possibly related to verdescarga.php...

Sql injection

SQL injection vulnerability in Rigter Portal System RPS 6.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI index.php, possibly related to verdescarga.php...

CVE-2007-1293

SQL injection vulnerability in Rigter Portal System RPS 6.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI index.php, possibly related to verdescarga.php...

CVE-2007-1293

CVE-2007-1293 concerns a SQL injection in Rigter Portal System (RPS) 6.2 when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL commands via the categoria parameter to the top-level URI (index.php), with a possible relation to ver_descarga.php. The NV...