CVE-2008-6651

The CVE-2008-6651 entry covers a static code injection in OxYProject OxYBox 0.85, specifically in edithistory.php. The vulnerability arises because an attacker can inject arbitrary PHP code into oxyhistory.php through the oxymsg parameter, enabling remote code execution. The affected component is...

Ftbbs7. 1 static GBK version 0day-vulnerability warning-the black bar safety net

conn. asp wood has done anti-injected into the, ftbbsmyinfo. asp and JB to an injection,a perfect match.. Posted on ftbbsmyinfo. asp source code: ASP/Visual Basic code 0 1.& lt;% 0 2. postuserid=request. QueryString”postuserid” 0 3. ftbbsuser=request. QueryString”ftbbsuser” 0 4. call FTBBSHTMLMBf...

openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-6133)

This update of phpMyAdmin fixes multiple vulnerabilities : - CVE-2009-1148: directory traversal - CVE-2009-1149: CRLF injection - CVE-2009-1150: cross-site scripting - CVE-2009-1151: static code injection %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Code injection

Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action...

CVE-2008-6539

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...

Code injection

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

Code injection

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...

CVE-2008-6542

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

CVE-2008-6539

The CVE-2008-6539 entry is concrete: DeStar 0.2.2-5 contains a static code injection in the user/settings/ path that allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter. The underlying issue is a code-in...

On the web Trojan automated analysis of two small ideas-vulnerability warning-the black bar safety net

Author: rayh4c 80sec Now online web Trojans and more are several sets of a fixed code, The changes are not many, including script code encryption methods, almost all is to explain the type of encryption, since the hack is performed the process of hanging horse, Inglés for the automated analysis o...

Arcadwy Arcade Script (username) Static XSS Vulnerability

No description provided by source. \ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s, BSDgurl, progenic. \/ ! EXPLOIT...

Arcadwy Arcade Script (username) Static XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= Arcadwy Arcade Script username Static XSS Vulnerability ========================================================= \ Information Script : Arcadwy Arcade Script CMS Buy/Download :...

Arcadwy Arcade Script Static XSS

\ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s, BSDgurl, progenic. / ! EXPLOIT 1 Go to http://site.com/register.ph...

Arcadwy Arcade Script - Username Static Cross-Site Scripting

Arcadwy Arcade Script - Username Static Cross-Site Scripting \ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s,...

Arcadwy Arcade Script - 'Username' Static Cross-Site Scripting

\ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s, BSDgurl, progenic. / ! EXPLOIT 1 Go to http://site.com/register.ph...

CVE-2008-6474

The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to inject arbitrary Perl code via unspecified configuration settings related to Perl EP3 with templates, probably triggering static code injection...

Code injection

The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to inject arbitrary Perl code via unspecified configuration settings related to Perl EP3 with templates, probably triggering static code injection...

CVE-2008-6474

The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to inject arbitrary Perl code via unspecified configuration settings related to Perl EP3 with templates, probably triggering static code injection...

Code injection

Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter...

CVE-2008-6446

The CVE concerns CMS MAXSITE’s Guestbook component where the message parameter enables static code injection, allowing remote PHP code execution. Affected: Guestbook functionality in MAXSITE (CMS). Root cause: insufficient input handling in the Guestbook message field leading to code execution. D...