CVE-2008-3457

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...

CVE-2008-3457

CVE-2008-3457 is a user-assisted XSS in phpMyAdmin’s setup.php, exploitable only in rare scenarios where an attacker can modify config/config.inc.php. Multiple disclosures (Debian DSA-1641-1, OSV, openVAS entries) confirm the vulnerability in phpMyAdmin prior to 2.11.8. Remediation per sources is...

CVE-2008-3457

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...

CVE-2008-3457: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...

MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may exploit these issues to obtain sensitive information. MyBlog 0.9.8 is...

sinecms-lfiexec.txt

| | | / | |\ \ / | / |/ | | | | |/ \ | | | |||| | | /| / / | | Sine CMS Local File Inclusion / RCE Registerglobals: ON | | Version: PoC: Usually, this is a correctly code, with no possible exploitation. But if registerglobals is ON, we...

SineCMS 2.3.5 - Local File Inclusion Remote Code Execution

SineCMS 2.3.5 - Local File Inclusion Remote Code Execution | | | / | |\ \ / | / |/ | | | | |/ \ | | | |||| | | /| / / | | Sine CMS Local File Inclusion / RCE Registerglobals: ON | | Version: = 2.3.5 | | Vendor: www.sinecms.net | | Discovered by: KiNgOfThEwOrLd | Intro: Sine cms is affected by a...

SineCMS 2.3.5 - Local File Inclusion / Remote Code Execution

| | | / | |\ \ / | / |/ | | | | |/ \ | | | |||| | | /| / / | | Sine CMS Local File Inclusion / RCE Registerglobals: ON | | Version: = 2.3.5 | | Vendor: www.sinecms.net | | Discovered by: KiNgOfThEwOrLd | Intro: Sine cms is affected by a local file inclusion vulnerabily with registerglobals on...

phpMyAdmin setup.php跨站脚本执行漏洞

BUGTRAQ ID: 26020 phpMyAdmin是用PHP编写的工具，用于通过WEB管理MySQL。 phpMyAdmin的setup.php文件没有正确地验证某些用户输入参数，允许远程攻击者通过提交恶意的URI请求执行跨站脚本攻击。 phpMyAdmin phpMyAdmin 2.11.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

about phpMyAdmin setup.php XSS vulnerability

Hi, phpMyAdmin version 2.11.1.1 was released to fix this, along with a security announcement: http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2007-5 which contains a mitigating factor: "We could only trigger it when using Internet Explorer with the 'send URLs as UTF8' setting disabled...

CVE-2007-5386

Cross-site scripting XSS vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2007-5386

Cross-site scripting XSS vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2007-5386: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2004-2739: Undefined Security Weakness

The setup routine setup.php in PHProjekt 4.2.1 and earlier allows remote attackers to modify system configuration via unknown attack vectors...

Design/Logic Flaw

admin/setup.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to read and modify configuration settings via a direct request...

CVE-2007-3192

admin/setup.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to read and modify configuration settings via a direct request...

CVE-2007-3192: Undefined Security Weakness

admin/setup.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to read and modify configuration settings via a direct request...

Cross site scripting

Cross-site scripting XSS vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1241

Cross-site scripting XSS vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1241

CVE-2007-1241 is an XSS vulnerability reported in Audins Audiens 3.3, specifically in setup.php, exploitable through PATH_INFO to inject arbitrary script/HTML. Concretely, multiple sources (NVD, CVE lists, Prion, Vulners) describe the same issue; the root cause is not elaborated beyond the PATH_I...