Digital Scribe 1.4.1 - Multiple SQL Injections

Digital Scribe 1.4.1 - Multiple SQL Injections Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities Name Digital Scribe Vendor http://www.digital-scribe.org Versions Affected 1.4.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmai...

Digital Scribe 1.4.1 - Multiple SQL Injections

Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities Name Digital Scribe Vendor http://www.digital-scribe.org Versions Affected 1.4.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X. INDEX I. ABOUT THE...

Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities =========================================================== Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities...

Directory traversal

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0822

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0822

CVE-2008-0822 affects Scribe 0.2: a directory traversal in index.php via the page parameter (".."), enabling read of arbitrary local files. Root cause is insufficient input validation. Impact is local confidentiality exposure (PARTIAL). CVSS v2 base score 3.6 (LOW) with LOCAL access and no authen...

CVE-2008-0822

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0822: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...

scribe02-lfi.txt

scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00...

scribe 0.2 local file inclusion vulnerability

scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd00...

Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability

No description provided by source. scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 sebug.net...

Scribe 0.2 - index.php Local File Inclusion

Scribe 0.2 - index.php Local File Inclusion scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= Scribe = 0.2 index.php page Local File Inclusion Vulnerability ================================================================= scribe 0.2 local file inclusion vulnerabilit...

Scribe 0.2 - 'index.php' Local File Inclusion

scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

CVE-2007-5822

The CVE-2007-5822 entry affects Ben Ng Scribe 0.2 and earlier, where a flaw in forum.php allows direct static code injection. An attacker can leverage the username parameter in the Register action to cause remote PHP code to be written into a file under regged/. The root cause appears to be impro...

CVE-2007-5823

Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the username parameter in a Register action...

CVE-2007-5823: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the username parameter in a Register action...

CVE-2007-5822: Improper Control of Generation of Code

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php...

Scribe <= 0.2 Remote PHP Code Execution Vulnerability

Exploit for unknown platform in category web applications ===================================================== Scribe | |||| /| / / --------------------------------------------------------------- Scribe YOURPHPCODE" br...

Scribe &lt;= 2.0 Remote PHP Code Execution

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original Here:...