CVE-2006-4575

Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the 1 lastname, 2 firstname, 3 passwordOld, 4 passwordNew, 5 id, 6 language, 7 defaultLetter, 8 newuserPass, 9 newuserType, 10 newuserEmail parameters in a user.php; the 1...

awrate.com Message Board 1.0 - search.php Remote File Inclusion

awrate.com Message Board 1.0 - search.php Remote File Inclusion !/usr/bin/perl Portal Name : awrate 1.0search.php Remote File Inclusion Exploit BUG: http://target/Path/search.php?toroot=http Vulnerable Code: includeonce"$toroot../commonphp/table.php.inc";; Bug Found DeltahackingTEAM Code...

awrate.com Message Board 1.0 - 'search.php' Remote File Inclusion

!/usr/bin/perl Portal Name : awrate 1.0search.php Remote File Inclusion Exploit BUG: http://target/Path/search.php?toroot=http Vulnerable Code: includeonce"$toroot../commonphp/table.php.inc";; Bug Found DeltahackingTEAM Code :Dr.Trojan&Dr.Pantagon Download...

CVE-2006-5236

SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL commands via the searchuser parameter...

CVE-2006-5236

CVE-2006-5236 is an SQL injection in 4images 1.7.x, exploitable via the search_user parameter in search.php. The vulnerability allows remote authenticated users to execute arbitrary SQL commands through that parameter. A PT-Security advisory for 4Images confirms affected versions (1.7.x) and reco...

4Images 1.7.x - 'search.php' SQL Injection

!/usr/bin/php //search.php?searchuser=x%2527%20union%20select%20userpassword%20from%204imagesusers%20where%20username=%2527ADMIN w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path options table prefix user id\n Options: -d: Determine table prefix\n Example: php $argv0 domain.com...

CVE-2006-5148

Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertorylevel parameter including scripts in /forum/ including 1 search.php, 2 message.php, 3 member.php, 4 mail.php, 5 lostpassword.php, 6...

OlateDownload3.4.0.txt

::OlateDownload 3.4.0 Multiple Vulnerabilities :: ------------------------------------------------ Software : OlateDownload Website : www.olate.co.uk Bug Discover : Hessam-x / www.hessamx.net I. Cross Site Scripting Vulnerability ------------------------------------------------- Parameter...

CVE-2006-5148

Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertorylevel parameter including scripts in /forum/ including 1 search.php, 2 message.php, 3 member.php, 4 mail.php, 5 lostpassword.php, 6...

CVE-2006-5059

Multiple cross-site scripting XSS vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to 1 dosearch.php, 2 postlist.php, 3 showmembers.php, 4 faqenglish.php, 5 online.php, 6 login.php, 7 newuser.php, 8 wwwthreads.php,...

CVE-2006-4917

Cross-site scripting XSS vulnerability in search.php in PT News 1.7.8 allows remote attackers to inject arbitrary web script or HTML via the pgname parameter...

CVE-2006-4923

The CVE-2006-4923 vulnerability affects the eSyndiCat Portal System, specifically the search.php component, where the what parameter can be exploited to inject arbitrary script/HTML (XSS). The issue is described as a cross-site scripting vulnerability enabling remote code/script insertion. The cu...

PT News 1.7.8 (Search.php) XSS Vulnerability

PT News 1.7.8 Search.php XSS Vulnerability ----------------------------------------------------------- PT News Version: 1.7.8 Website URL:http://www.openbg.net/ptsite/ ----------------------------------------------------------- Discoved by Snake Unkn0wn Security Researcher The original article ca...

CVE-2006-4881

Multiple cross-site scripting XSS vulnerabilities in David Bennett PHP-Post PHPp 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the replyuser parameter in a pm.php; 2 the txtjumpto parameter in b dropdown.php; the 3 txterror and 4 txttemplatenotexist parameter...

eSyndiCat Portal System XSS Vuln.

eSyndiCat Portal System has an xss bug in search.php can be exploited from web interface http://www.example.com/path/search.php?what=xss&searchtop.x=0&searchtop.y=0&searchtop=GO -------------------- Discovered by meto5757 Rootshell Security Group...

Pie Cart Pro - Inc_Dir Remote File Inclusion

Pie Cart Pro - IncDir Remote File Inclusion ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA...

CVE-2006-4794

Multiple cross-site scripting XSS vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string PATHINFO in 1 contact.php, 2 download.php, 3 admin.php, 4 fpw.php, 5 news.php, 6 search.php, 7 signup.php, 8 submitnews.php, and 9 user.php. NOTE: the...

vikingMultiple.txt

================================================ :: Vikingboard 0.1b Multiple Vulnerabilities :: ================================================ Software : Vikingboard Website : http://www.vikingboard.com/ Discover : Hessam-x / www.hessamx.net I. Cross Site Scripting Vulnerabilities...

CVE-2006-4708

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the 1 act parameter in a help.php and b search.php, and the 2 p parameter in report.php...

CVE-2006-4708

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the 1 act parameter in a help.php and b search.php, and the 2 p parameter in report.php...