Design/Logic Flaw

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter...

CVE-2009-4854

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter...

CVE-2009-4854

CVE-2009-4854 affects TalkBack 2.3.14: addons/import.php accepts a result parameter that enables remote command execution. This is a server-side input handling flaw in the import routine (component/file: addons/import.php) that permits arbitrary commands to be executed by an attacker. The CVSS-de...

CVE-2009-4854: Improper Input Validation

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter...

TalkBack 2.3.14 Execution / Local File Inclusion

JIKO No-exploit.Com Download:http://scripts.oldguy.us/talkback/downloads2/talkback2.3.14.zip Script : talkback V 2.3.14 Dork:inurl:test.php Powered by TalkBack -------------------------------------------- Edit Comment + talkback/comments.php?edit=1&editid=2& Command +...

TalkBack 2.3.14 Multiple Remote Vulnerabilities

No description provided by source. JIKO No-exploit.Com Download:http://scripts.oldguy.us/talkback/downloads2/talkback2.3.14.zip Script : talkback V 2.3.14 Dork:inurl:test.php Powered by TalkBack -------------------------------------------- Edit Comment + talkback/comments.php?edit=1&editid=2&...

TalkBack 2.3.14 - Multiple Vulnerabilities

TalkBack 2.3.14 - Multiple Vulnerabilities JIKO No-exploit.Com Download:http://scripts.oldguy.us/talkback/downloads2/talkback2.3.14.zip Script : talkback V 2.3.14 Dork:inurl:test.php Powered by TalkBack -------------------------------------------- Edit Comment +...

TalkBack 2.3.14 - Multiple Vulnerabilities

JIKO No-exploit.Com Download:http://scripts.oldguy.us/talkback/downloads2/talkback2.3.14.zip Script : talkback V 2.3.14 Dork:inurl:test.php Powered by TalkBack -------------------------------------------- Edit Comment + talkback/comments.php?edit=1&editid=2& Command +...

CVE-2008-4346

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to comments.php, a different vector than CVE-2008-3371...

CVE-2008-4346

CVE-2008-4346 : TalkBack has a directory traversal vulnerability allowing remote attackers to include and execute arbitrary local files via the language parameter. Affected versions include TalkBack 2.3.5 and other versions before 2.3.6.2 (and similar vector in comments.php as noted in CVE-2008-4...

CVE-2008-4346

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to comments.php, a different vector than CVE-2008-3371...

CVE-2008-4346: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to comments.php, a different vector than CVE-2008-3371...

CVE-2008-4115

TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

CVE-2008-4115

CVE-2008-4115 : The vulnerability affects TalkBack 2.3.6, where a remote attacker can disclose configuration information by directly requesting install/info.php, which calls the phpinfo function. The root cause is the information disclosure via phpinfo exposure through a non-authenticated, remote...

Information disclosure

TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

CVE-2008-4115: Exposure of Sensitive Information to an Unauthorized Actor

TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure Vulns

No description provided by source. + Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion PoC 1 :...

talkback-lfidisclose.txt

Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion PoC 1 : http://target/path/comments.php?language=Local File%00 Example 1 :...

Talkback 2.3.6 - Multiple Local File Inclusion PHPInfo Disclosure Vulnerabilities

Talkback 2.3.6 - Multiple Local File Inclusion PHPInfo Disclosure Vulnerabilities + Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion...

Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure Vulns

Exploit for unknown platform in category web applications ===================================================================== Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure Vulns ===================================================================== + Talkback 2.3.6 Multiple Loc...