5149 matches found
CVE-2007-1947
Affected software: Firebug extension for Mozilla Firefox (DOM templates used by console.log, domplates). Vulnerability: Cross-zone scripting via overwriting toString in anonymous functions within domplates, enabling bypass of zone restrictions and potential read of file:// URIs or code execution ...
Cross site scripting
Cross-zone scripting vulnerability in the DOM templates domplates used by the console.log function in the Firebug extension before 1.03 for Mozilla Firefox allows remote attackers to bypass zone restrictions, read arbitrary file:// URIs, or execute arbitrary code in the browser chrome, as...
CVE-2007-1878
Cross-zone scripting vulnerability in the DOM templates domplates used by the console.log function in the Firebug extension before 1.03 for Mozilla Firefox allows remote attackers to bypass zone restrictions, read arbitrary file:// URIs, or execute arbitrary code in the browser chrome, as...
CVE-2007-1878
CVE-2007-1878 describes a Cross-zone scripting weakness in the DOM templates (domplates) used by Firebug’s console.log in Firefox, allowing remote execution by bypassing zone restrictions and reading file:// URIs via the runFile path, due to lack of HTML escaping in the property name. It affects ...
MangoBery CMS 0.5.5 (quotes.php) Remote File Inclusion Vulnerability
Mangobery-0.5.5 Found by kezzap66345 Script Page:http://mangobery.sourceforge.net/ Demo Site:http://mangobery.beryllium.ca/ Script Download:http://sourceforge.net/project/showfiles.php?groupid=63834&packageid=60858 Dork:http://www.google.com.tr/search?hl=tr&q=22MangoBery+1.0+Alpha22&meta= ERROR1:...
MangoBery CMS 0.5.5 (quotes.php) Remote File Inclusion Vulnerability
No description provided by source. Mangobery-0.5.5 Found by kezzap66345 Script Page:http://mangobery.sourceforge.net/ Demo Site:http://mangobery.beryllium.ca/ Script Download:http://sourceforge.net/project/showfiles.php?groupid=63834&packageid=60858...
Remote file inclusion
PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes APB 0.2.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGStemplatepath parameter. NOTE: this issue might be related to CVE-2003-1254...
CVE-2007-1587
templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the program name in the qshapeLocation parameter...
CVE-2006-7154
The CVE concerns Iono: remote attackers can obtain the full server path by crafting requests to templates/iono/admin/denied.tpl.php, templates/iono/admin/index.tpl.php, and other files under templates/. The vulnerability description indicates a server path disclosure via file requests in the temp...
DEBIAN-CVE-2006-6808
Cross-site scripting XSS vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: some sources have reported this as a vulnerability in the getfiledescription function in wp-admin/admin-functions.php...
CVE-2006-6479
Multiple cross-site scripting XSS vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email parameter in 1 erreurinscription.php, 2 Templates/admin.dwt.php, 3 Templates/commun.dwt.php, 4 membre.dwt.php, and 5 admin/adminconfig/Aide.php...
CVE-2006-6356
Multiple cross-site scripting XSS vulnerabilities in templates/linktemp.php in PHPNews 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 url, 2 id, 3 subject, 4 username, or 5 time parameter...
CVE-2006-6357
PHPNews 1.3.0 and earlier contains a cross-site scripting (XSS) vulnerability in templates/cat_temp.php. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The public details specify the affected product and file but do not provide exploit steps, aff...
DeluxeBB sig.php远程文件包含漏洞
DeluxeBB是一款基于PHP的论坛程序。 DeluxeBB对用户请求的处理存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意指令。 DeluxeBB的templates/deluxe/cp/sig.php脚本没有对templatefolder参数做充分的检查过滤，允许攻击者通过恶意参数串包含远程服务器上的脚本代码执行。 DeluxeBB DeluxeBB 1.09 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： DeluxeBB hotfixfor109.zip...
CVE-2006-5627
CVE-2006-5627 affects QnECMS up to version 2.5.6, where multiple PHP remote file inclusion vulnerabilities exist. An attacker can supply a URL via the adminfolderpath parameter to files under admin/include/ (headerscripts.php, footerhome.php, footermain.php) and templates/ (headerscripts.php, foo...
CVE-2006-5627
Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the adminfolderpath parameter to 1 headerscripts.php, 2 footerhome.php, and 3 footermain.php in admin/include/; 4 photogallery/headerscripts.php; and 5...
CVE-2006-5263
The CVE-2006-5263 issue affects phpMyAgenda 3.1 and earlier, where a directory traversal vulnerability in templates/header.php3 allows remote attackers to include and execute arbitrary local files by passing a .. in the language parameter (example using an Apache log file that contains PHP code)....
PBLang 4.66z - temppath Remote File Inclusion
PBLang 4.66z - temppath Remote File Inclusion ============================================================================================== Software PBLang = v4.66z temppath Remote File Inclusion Exploit...
PBLang <= 4.66z (temppath) Remote File Include Vulnerability
No description provided by source. ============================================================================================== Software PBLang = v4.66z temppath Remote File Inclusion Exploit =============================================================================================== Critica...