6594 matches found
Sql injection
SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter...
CVE-2007-1450
SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter...
CVE-2007-1450
SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter...
Top Auction 1.0 (viewcat.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== Top Auction 1.0 viewcat.php Remote SQL Injection Exploit ========================================================== !/usr/bin/perl Script Name: Top Auction 1.0 viewcat.php Remote...
Top Auction 1.0 - 'viewcat.php' SQL Injection
!/usr/bin/perl Script Name: Top Auction 1.0 viewcat.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.phplabs.com $$ : 39.95$ .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are...
Cross site scripting
Cross-site scripting XSS vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the top-level URI on the Incoming interface port 8001/tcp, which is not properly handled in the administrator interface when viewing the log file...
CVE-2007-1151
Cross-site scripting XSS vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter to the top-level URI, possibly related to a SQL error...
CVE-2007-1149
Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. dot dot in 1 the step parameter to install/index.php or 2 the load parameter to the top-level URI...
Directory traversal
Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a .. dot dot in the 1 act or 2 pid parameter to the top-level URI index.php, or the 3 action parameter to admin/index.php. NOTE: some of these details are obtained from third part...
CVE-2007-0921
Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URI...
Cross site scripting
Cross-site scripting XSS vulnerability in Quick Digital Image Gallery Qdig 1.2.9.3 and devel-20060624 allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI...
DEBIAN-CVE-2007-0341
Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than...
phpPC <= 1.04 Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ phpPC = 1.04 Multiple Remote File Inclusion Vulnerabilities ============================================================ phpPC 1.04 Multiples Remote File Inclusion Script : PHP...
phpPC <= 1.04 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php -------------------------------- ?ph...
phpPC 1.04 - Multiple Remote File Inclusions
phpPC 1.04 - Multiple Remote File Inclusions phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php...
FreeBSD TOP Format String Vulnerability
No description provided by source. / freebsd x86 top exploit affected under top-3.5beta9 including this version 1. get the address of .dtors from /usr/bin/top using objdump , 'objdump -s -j .dtors /usr/bin/top' 2. divide it into four parts, and set it up into an environment variable like "XSEO=" ...
phptopwebs-rfi.txt
===================================================================== PHP Top webs config.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download...
security flaw
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting XSS attacks using DOM methods of the top-level object...
CVE-2006-3769
Multiple cross-site scripting XSS vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pass and 2 pass2 parameters in a add.php or the 3 id parameter in b members/index.php...
[MajorSecurity #22] Top XL <=1.1 - XSS and cookie disclosure
MajorSecurity 22 Top XL =1.1 - XSS and cookie disclosure ----------------------------------------------------------------- Software: Top XL Version: =1.1 Type: Cross site scripting and cookie disclosure Made public: July, 20th 2006 Vendor: http://www.paddelberg.de Page: http://www.paddelberg.de...