Cerulean Portal System 0.7b - Remote File Inclusion

Cerulean Portal System 0.7b - Remote File Inclusion ----------------------------------------------- Cerulean Portal System phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info -----------------------------------------------...

Design/Logic Flaw

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message...

CVE-2007-0266

SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the pic parameter to custom/piczoom.asp, 2 the nocatname parameter to boxx/user-upload.asp, or 3 the iid parameter to...

CVE-2007-0265

Multiple cross-site scripting XSS vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the pic parameter to custom/piczoom.asp, 2 the nocatname parameter to boxx/user-upload.asp, or 3 the iid parameter to...

Sql injection

SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter...

CVE-2007-0259

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message...

CVE-2007-0259

CVE-2007-0259 affects Ezboxx Portal System Beta 0.7.6 and earlier. The vulnerability arises from an invalid cat parameter to the boxx/knowledgebase.asp page, causing an error message that reveals the server path. This exposes sensitive information to remote attackers. Exploitation details, affect...

CVE-2007-0266

CVE-2007-0266 affects Ezboxx Portal System Beta 0.7.6 and earlier, where the boxx/ShowAppendix.asp component is vulnerable to SQL injection via the iid parameter. The vulnerability can allow a remote attacker to inject arbitrary web script or HTML. Documents consistently describe the affected fil...

CVE-2007-0259

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message...

CVE-2007-0265

CVE-2007-0265 concerns Ezboxx Portal System Beta 0.7.6 and earlier, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary script/HTML via (1) pic parameter in custom/piczoom.asp, (2) nocatname parameter in boxx/user-upload.asp, or (3) iid parameter i...

CVE-2007-0266

SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter...

CVE-2007-0265

Multiple cross-site scripting XSS vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the pic parameter to custom/piczoom.asp, 2 the nocatname parameter to boxx/user-upload.asp, or 3 the iid parameter to...

Ezboxx multiple vulnerabilities.

Ezboxx multiple vulnerabilities. Vulnerable version: Ezboxx Portal System Beta v 0.7.6 and below. The Ezboxx Portal System Beta v 0.7.6 and below versions are vulnerable to Cross-site scripting, Path disclosure and SQL Injection attacks. Cross-site scripting: ---------------------- Description:...

CVE-2006-6722

Bandwebsite aka Bandsite portal system 1.5 allows remote attackers to create administrative accounts via a direct request to admin.php with the Login parameter set to 1...

CVE-2006-6722

CVE-2006-6722 affects Bandwebsite (Bandsite portal system) 1.5. Remote attackers can create administrative accounts by issuing a direct request to admin.php with the Login parameter set to 1. This is a network‑level issue with low attack complexity and no authentication required, allowing partial...

CVE-2006-6722

Bandwebsite aka Bandsite portal system 1.5 allows remote attackers to create administrative accounts via a direct request to admin.php with the Login parameter set to 1...

Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit

No description provided by source. !-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting...

Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit

Exploit for unknown platform in category web applications =================================================== Bandwebsite Name: Pass: 0day.today 2018-03-28...

Bandsite portal system Admin Added Access

!-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour...