317 matches found
Webfroot Shoutbox 2.32 - 'Expanded.php' Directory Traversal
source: https://www.securityfocus.com/bid/7775/info A problem in Shoutbox may result in traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to the expanded.php script, and could allow the viewing of potentially sensitive files by attackers...
Webfroot Shoutbox 2.32 directory traversal and code injection.
Products: Webfroot Shoutbox v 2.32 and below http://shoutbox.sf.net Date: 09 May 2003 Author: pokleyzz pokleyzzatscan-associates.net Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Webfroot Shoutbox 2.32 a...
Webfroot Shoutbox 2.32 - Remote Command Execution
Webfroot Shoutbox 2.32 - Remote Command Execution source: https://www.securityfocus.com/bid/7746/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of the 'conf' URI parameter. An attacker can...
Webfroot Shoutbox < 2.32 (Apache) Remote Exploit
Exploit for linux platform in category remote exploits ================================================ Webfroot Shoutbox ';fclose$h;? HTTP/1.1\nHost: 127.0.0.1\nConnection: Close\n\n"; my $conn; if $ARGV0 eq "x" || $ARGV0 eq "r" $type = $ARGV0; else print "x Webfroot Shoutbox 2.32 on apache...
shoutbox.txt
Products: Webfroot Shoutbox v 2.32 and below http://shoutbox.sf.net Date: 09 May 2003 Author: pokleyzz Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Webfroot Shoutbox 2.32 and below directory traversal a...
Webfroot Shoutbox 2.32 (Apache) - Local File Inclusion Remote Code Execution
Webfroot Shoutbox 2.32 Apache - Local File Inclusion Remote Code Execution !/usr/bin/perl Webfroot Shoutbox ';fclose$h;? HTTP/1.1\nHost: 127.0.0.1\nConnection: Close\n\n"; my $conn; if $ARGV0 eq "x" || $ARGV0 eq "r" $type = $ARGV0; else print "x Webfroot Shoutbox 2.32 on apache exploit \n\n";...
Webfroot Shoutbox 2.32 - Remote Command Execution
source: https://www.securityfocus.com/bid/7746/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of the 'conf' URI parameter. An attacker can exploit this vulnerability to execute arbitrary...
Webfroot Shoutbox < 2.32 (Apache) - Local File Inclusion / Remote Code Execution
!/usr/bin/perl Webfroot Shoutbox ';fclose$h;? HTTP/1.1\nHost: 127.0.0.1\nConnection: Close\n\n"; my $conn; if $ARGV0 eq "x" || $ARGV0 eq "r" $type = $ARGV0; else print "x Webfroot Shoutbox 2.32 on apache exploit \n\n"; print "Usage: \n Webfroot.pl x|r host command path port\n"; print "\ttype\tx =...
Webfroot Shoutbox < 2.32 (Apache) Remote Exploit
No description provided by source. !/usr/bin/perl Webfroot Shoutbox 2.32 on apache exploit use IO::Socket; my $host = "127.0.0.1"; my $port = 80; my $shoutbox = "shoutbox.php?conf="; my $shoutboxpath = "/shoutbox"; my $cmd = "ls -l"; my $conn; my $type; my @logs = "/etc/httpd/logs/acceslog",...
Webfroot shoutbox.php conf Parameter Traversal Local File Inclusion
The remote host is running Webfroot Shoutbox, a PHP application that allows website visitors to leave one another messages. The version of Webfroot Shoutbox installed on the remote host allows an attacker to read arbitrary files and possibly to inject arbitrary PHP code into the remote host and...
CVE-2002-1429
Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...
CVE-2002-1429
Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...
CVE-2002-1429
The CVE-2002-1429 entry corresponds to a cross-site scripting (XSS) vulnerability in endity.com’s ShoutBOX, specifically in the board.php handler. The flaw allows remote attackers to inject arbitrary HTML into the shoutbox page by manipulating the site parameter. Documents confirm the affected co...
PT-2003-1176 · Endity.Com · Shoutbox
Name of the Vulnerable Software and Affected Versions: ShoutBOX affected versions not specified Description: A cross-site scripting issue exists in the board.php file of ShoutBOX on endity.com, allowing remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...
[SCSA-003] Multiple Cross Site Scripting & Script Injection Vulnerabilities in Nuked-Klan
.: Multiple Cross Site Scripting & Script Injection Vulnerabilities in Nuked-Klan :. Security Corporation Security Advisory SCSA-003 PROGRAM: Nuked-Klan HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: beta 1.2 and prior DESCRIPTION Nuked Klan is a PHP Gateway for "clans". direct quote fr...
Code injection Vulnerability in endity.com's shoutBOX
Overview ----------------------- A shoutbox is a fun tool webmasters put on their site that allows them to receive feedback from users quickly. By typing in their name, site URL, & message, users can post comments, suggestions, praises, flames, etc. onto the shoutbox and it will be seen by everyo...
ShoutBox 1.2 - 'Form' HTML Injection
source: https://www.securityfocus.com/bid/5354/info shoutBOX does not sufficiently sanitize HTML tags from input supplied via form fields. Attackers may exploit this lack of input validation to inject arbitrary HTML and script code into pages that are generated by the script. This may result in...