PowerPortal 2.0.13 - path Local Directory Traversal

PowerPortal 2.0.13 - path Local Directory Traversal . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -Marezzi-P47tr1ck- FeDeReR...

PowerPortal 2.0.13 - 'path' Local Directory Traversal

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -Marezzi-P47tr1ck- FeDeReR -MAGE -JeTFyrE- DON-Outlawz and all darkc0de and...

PowerPortal 2.0.13 (path) Local Directory Traversal Vulnerability

Exploit for unknown platform in category web applications ================================================================= PowerPortal 2.0.13 path Local Directory Traversal Vulnerability ================================================================= . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ /...

CVE-2006-5169

Cross-site scripting XSS vulnerability in John Himmelman aka DaRk2k1 PowerPortal 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to registering a user. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-5169

CVE-2006-5169 is an XSS vulnerability in PowerPortal 1.1 (attributed to John Himmelman/aka DaRk2k1). The connected records specify that remote attackers can inject arbitrary script or HTML via unspecified vectors, possibly related to user registration. There is no explicit exploit code or in-the-...

CVE-2006-5169

Cross-site scripting XSS vulnerability in John Himmelman aka DaRk2k1 PowerPortal 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to registering a user. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-5126

PHP remote file inclusion vulnerability in index.php in John Himmelman aka DaRk2k1 PowerPortal 1.3a allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...

CVE-2006-5126

PHP remote file inclusion vulnerability in index.php in John Himmelman aka DaRk2k1 PowerPortal 1.3a allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...

CVE-2006-5126

Affects PowerPortal 1.3a (John Himmelman). The PHP remote file inclusion vulnerability in index.php allows remote attackers to execute arbitrary PHP code via a URL in the file_name[] parameter. The issue is classified with a NVD base score of 7.5 (HIGH) and impacts confidentiality, integrity, and...

PowerPortal 1.3a - index.php Remote File Inclusion

PowerPortal 1.3a - index.php Remote File Inclusion ============================================================================================== PowerPortal Remote File Include =============================================================================================== Critical Level :...

PowerPortal 1.3a - 'index.php' Remote File Inclusion

============================================================================================== PowerPortal Remote File Include =============================================================================================== Critical Level : Dangerous scripts: PowerPortal download:...

PowerPortal 1.3a (index.php) Remote File Include Vulnerability

No description provided by source. ============================================================================================== PowerPortal Remote File Include =============================================================================================== Critical Level : Dangerous scripts:...

PowerPortal 1.3a (index.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== PowerPortal 1.3a index.php Remote File Include Vulnerability ==============================================================...

PowerPortal Remote File Include

============================================================================================== PowerPortal Remote File Include =============================================================================================== Critical Level : Dangerous scripts: PowerPortal download:...

CVE-2006-0358

Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL commands via the search parameter in 1 index.php and 2 search.php. NOTE: This issue might overlap CVE-2004-0663.2...

Sql injection

Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL commands via the search parameter in 1 index.php and 2 search.php. NOTE: This issue might overlap CVE-2004-0663.2...

CVE-2006-0358

PowerPortal contains multiple SQL injection vulnerabilities affecting version range 1.1 beta through 1.3. The issue can allow remote attackers to execute arbitrary SQL commands via the search parameter in (1) index.php and (2) search.php. Root cause: unsafeguarded input in the search parameter en...

CVE-2006-0358

Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL commands via the search parameter in 1 index.php and 2 search.php. NOTE: This issue might overlap CVE-2004-0663.2...

PowerPortal Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior771athotmail.com PowerPortal Cross-Site Scripting Vulnerability Contact :nightwarrior771athotmail.com http://powerportal.sourceforge.net/ Vuln XSS : http://www.example.com/modules/content/search.php?func=results&search=XSS...

PowerPortal 1.1/1.3 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16279/info PowerPortal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...