CVE-2007-4487

Cross-site scripting XSS vulnerability in D22-Shoutbox for Invision Power Board IPB or IP.Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-4487

Technical details about CVE-2007-4487 are not publicly available in the provided documents; monitor for updates. The data here only reiterates a generic XSS vulnerability in D22-Shoutbox for IPB.

CVE-2007-4487: Undefined Security Weakness

Cross-site scripting XSS vulnerability in D22-Shoutbox for Invision Power Board IPB or IP.Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Remote file inclusion

PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2007-4330

PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2007-4330

PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2007-4330

CVE-2007-4330 describes a PHP remote file inclusion in Shoutbox 1.0 (shoutbox.php) that lets an attacker execute arbitrary PHP code by supplying a URL in the root parameter. The vulnerability stems from improper validation of the root input, enabling remote code injection over the network. Accord...

CVE-2007-4330: Undefined Security Weakness

PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

shoutbox-rfi.txt

Shoutbox 1.0 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : Shoutbox 1.0 Version : 1.0 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack Thanks : Kurdish Hackers...

Shoutbox 1.0 Remote Command Execution Vulnerability

Shoutbox 1.0 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : Shoutbox 1.0 Version : 1.0 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack Thanks : Kurdish Hackers...

Shoutbox 1.0 - Shoutbox.php Remote File Inclusion

Shoutbox 1.0 - Shoutbox.php Remote File Inclusion source: https://www.securityfocus.com/bid/25254/info Shoutbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application a...

Shoutbox 1.0 - 'Shoutbox.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/25254/info Shoutbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

MySpeach <= 3.0.7 Remote/Local File Inclusion Vulnerability

No description provided by source. /======================================= | Advisory :: MySpeach = 3.0.7 | +=======================================+--------------------------------------------------------------- | | | Download link : http://www.graphiks.net/scripts-php/script-7-1-0.html | |...

MySpeach 3.0.7 - LocalRemote File Inclusion

MySpeach 3.0.7 - LocalRemote File Inclusion /=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | |...

CVE-2006-7137

Cross-site scripting XSS vulnerability in TinyPortal before 0.8.6 allows remote attackers to inject arbitrary web script or HTML via the shoutbox...

CVE-2006-7137: Undefined Security Weakness

Cross-site scripting XSS vulnerability in TinyPortal before 0.8.6 allows remote attackers to inject arbitrary web script or HTML via the shoutbox...

CVE-2007-0546

Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db.mdb...

CVE-2007-0546

Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db.mdb...

CVE-2007-0546

CVE-2007-0546 affects Toxiclab Shoutbox 1, where a misconfigured web root allows remote attackers to access the database file db.mdb and download passwords. The vulnerability stems from insufficient access control that exposes sensitive data under the web root, enabling disclosure of credentials ...

CVE-2007-0546: Undefined Security Weakness

Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db.mdb...