1358 matches found
Fire Soft Board <= RC 3 (racine) Remote File Include Vulnerability
No description provided by source. ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- Fire Soft Board - Remote File Include Vulnerabilities site : http://www.comscripts.com/jump.php?action=script&id=1689&SID=b8a60b0cb6352bc4e545abf0dd4ea90d Script : Fire Soft Board Credits : ERNE Contact :...
CVE-2006-1958
CVE-2006-1958 involves multiple SQL injection vulnerabilities in WWWThreads RC 3. The two attack vectors are (1) the forumreferrer cookie to register.php and (2) the messages parameter in message_list.php, allowing remote attackers to execute arbitrary SQL commands. The CVE description indicates ...
CVE-2006-1958
Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via 1 the forumreferrer cookie to register.php and 2 the messages parameter in messagelist.php...
WWWThread RC 3 MultBugs
code// --- WWWThread RC 3 MultBugs --- // D3vil-0x1 | Devil-00 www.securitygurus.net Gr33tz - HACKERS PAL | n0m3rcy | - & All Others i forgot them : //---------------------------------// //---------------------------------// Bug 1 //---------------------------------// // File name :- register.php...
CVE-2006-1621: Undefined Security Weakness
Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolute path in the OpenPath parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...
Sql injection
SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...
CVE-2006-0234
CVE-2006-0234 documents a SQL injection vulnerability in the web application component: index.php of the microBlog 2.0 RC-10 release. The underlying issue is an injection flaw that allows remote attackers to append arbitrary SQL commands via the two parameters, (1) month and (2) year. The vulnera...
CVE-2006-0233
Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...
CVE-2005-4329
CVE-2005-4329 affects PHP Arena paFileDB Extreme Edition RC 5 and earlier . The vulnerability is a SQL injection in the file pafiledb.php , allowing remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameters. The initial details show a network attack vector with a...
CVE-2005-2044
CVE-2005-2044 affects ATutor (versions 1.4.3 and 1.5 RC1) with multiple reflected cross-site scripting (XSS) flaws. The vulnerability enables remote attackers to inject arbitrary web script or HTML through a long list of parameters across several pages: show_course (browse.php), subject (contact....
CMDExe.txt
This unpatched vulnerability is a variant of the "Auto SP2 RC Exploit" Solution : Set the security level for all zones to "High" in Internet Explorer // index.htm // locate.HHClick;setTimeout"locator.HHClick",100;setTimeout "window.opener=null;window.close",10000 // htm.txt // document.write" par...
CVE-2002-0795
CVE-2002-0795 affects the FreeBSD rc startup script (FreeBSD 4–4.5). The root cause is a symlink attack on X Window system lock files that allows local users to delete arbitrary files. Exploitation details are not provided in the available documents, so the exact steps and vulnerable files are no...
CVE-2002-0795: Undefined Security Weakness
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files...
Security Advisory FreeBSD-SA-02:27.rc
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:27.rc Security Advisory The FreeBSD Project Topic: rc uses file globbing dangerously Category: core Module: rc Announced: XXXX-XX-XX Credits: lumpy [email protected]...
FreeBSD-SA-02:27.rc
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:27.rc Security Advisory The FreeBSD Project Topic: rc uses file globbing dangerously Category: core Module: rc Announced: 2002-05-29 Credits: lumpy Affects: FreeBSD...
CVE-2000-0702
The CVE-2000-0702 issue affects HP-UX 11.00 (S008net.init) where the net.init rc script could be abused by a local user via a symlink attack from /tmp/stcp.conf to a targeted file, allowing overwriting of arbitrary files. The vulnerability is local and affects file integrity and confidentiality (...