CVE-2007-0576

PHP remote file inclusion vulnerability in xtcounter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the serverbasedir parameter...

CVE-2007-0576: Undefined Security Weakness

PHP remote file inclusion vulnerability in xtcounter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the serverbasedir parameter...

Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability

Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode milw0rm.com 2007-01-27...

Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability

No description provided by source. Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode...

Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Xt-Stats v.2.4.0.b3 serverbasedir Remote File Include Vulnerability ======================================================================= Finded by ThE email protect...

Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Inclusion

Xt-Stats 2.4.0.b3 serverbasedir - Remote File Inclusion Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php';...

On a write MD5 online hack website-vulnerability warning-the black bar safety net

| digital crack the better the letters to crack the better from 1 to 4 digits- seems off. American-British dictionary crack collection and IP address digital crack the better estimation is based dictionary crack this touches on that so badly,but in practice,many times here I can't find this is my...

CVE-2006-5899

PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...

CVE-2006-5899

PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...

CVE-2006-5899

The CVE-2006-5899 issue is a PHP remote file inclusion in @cid stats 2.3 via the repertoire parameter of install.php3, enabling remote code execution. The root cause is the presence of install.php3 that can be invoked with a URL parameter to include arbitrary PHP code. The notes in sources indica...

CVE-2006-5899: Undefined Security Weakness

PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...

@cid Stats 2.3 - 'Install.php3' Remote File Inclusion

source: https://www.securityfocus.com/bid/20925/info The '@cid stats' program is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

Debian DSA-1148-1 : gallery - several vulnerabilities

Several remote vulnerabilities have been discovered in gallery, a web-based photo album. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-2734 A cross-site scripting vulnerability allows injection of web script code through HTML or EXIF information. ...

PT-2006-5967 · Isearch · Isearch

Name of the Vulnerable Software and Affected Versions: iSearch version 2.16 Description: The issue concerns remote file inclusion vulnerabilities that could allow remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the isearch path parameter within various PHP...

osCommerce 2.2 - '/admin/stats_products_purchased.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

CVE-2006-4030: Undefined Security Weakness

Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs."...

CVE-2006-3580

SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2006-3580

CVE-2006-3580 describes an SQL injection in pages.asp of the ASP Stats Generator before 2.1.2. Remote attackers can execute arbitrary SQL commands via the order parameter. The CVSS data (base 7.5, HIGH) indicates Potential impact to confidentiality, integrity, and availability (partial for each)....

CVE-2006-3580

SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2006-3544

Multiple SQL injection vulnerabilities in Invision Power Board IPB 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a 1 Stats, 2 Mail, and 3 Reg action in index.php. NOTE: the developer has disputed this issue, stating that "At no point does the CODE...