KISGB <= 5.1.1 (authenticate.php) Remote File Include Vulnerability

No description provided by source. KISGB Keep It Simple Guest Book defaultpathforthemes Remote File Include +class : Remote File Include Vulnerability + +download link : http://phpnuke-downloads.com/modules.php?name=Downloads&dop=nsgetit&cid=14&lid=156&type=urlget +Author : mdx +Files :...

Bandwebsite 1.5 - 'LOGIN' Remote Add Admin

Name: Pass: milw0rm.com 2006-12-16...

PwsPHP <= 1.1 (themes/fin.php) Remote File Include Vulnerablity

No description provided by source. ========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1...

PwsPHP <= 1.1 (themes/fin.php) Remote File Include Vulnerablity

Exploit for unknown platform in category web applications =============================================================== PwsPHP = 1.1 themes/fin.php Remote File Include Vulnerablity ===============================================================...

CVE-2006-5498

CVE-2006-5498 concerns a directory traversal in Segue CMS prior to or at version 1.5.8, specifically in themes/program/themesettings.inc.php. The flaw lets remote attackers include and execute arbitrary local files by supplying a .. (dot dot) in the theme parameter. Impact is reflected as Partial...

Segue CMS 1.5.8 - themesdir Remote File Inclusion

Segue CMS 1.5.8 - themesdir Remote File Inclusion +------------------------------------------------------------------------------------------- + Segue CMS +------------------------------------------------------------------------------------------- + Details: + Segue CMS...

Segue CMS <= 1.5.8 (themesdir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Segue CMS +------------------------------------------------------------------------------------------- + Details: + Segue CMS themes/program/themesettings.inc.php does not...

Coppermine Photo Gallery 1.2.2b (Nuke Addon) - Remote File Inclusion

Coppermine Photo Gallery 1.2.2b Nuke Addon - Remote File Inclusion ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for...

DEBIAN-CVE-2006-1678

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...

CVE-2006-1678

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...

CVE-2006-1678

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...

CVE-2006-1678

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...

phpmyadmin -- XSS vulnerabilities

phpMyAdmin security announcement: It was possible to conduct an XSS attack with a direct call to some scripts under the themes directory...

XSS vulnerabilities

PMASA-2006-1 Announcement-ID: PMASA-2006-1 Date: 2006-04-06 Summary XSS vulnerabilities Description It was possible to conduct an XSS attack with a direct call to some scripts under the themes directory. We wish to thank Toni Koivunen/CERT-FI for this advisory. Severity We consider these...

[eVuln] WebspotBlogging Authentication Bypass Vulnerability

New eVuln Advisory: WebspotBlogging Authentication Bypass Vulnerability http://evuln.com/vulns/41/summary.html --------------------Summary---------------- Software: WebspotBlogging Sowtware's Web Site: http://www.webspot.co.uk/ Versions: 3.0 Critical Level: Dangerous Type: SQL Injection Class:...

PluggedOut Blog SQL vuln.

PluggedOut Blog SQL vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/pluggedout-blog-sql-vuln.html vendor:www.pluggedout.com/index.php?pk=devblog affected version:1.9.4 , 1.9.5 and prior Product Description: Blog is an open source script you ca...

CVE-2005-3924

SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the 1 kategorieid and 2 katid parameters...

CVE-2005-3924

CVE-2005-3924 is a SQL injection vulnerability in Randshop, specifically in themes/kategorie/index.php. The issue allows remote attackers to execute arbitrary SQL commands through the kategorieid and katid parameters. NVD lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low co...

PT-2005-4664 · Randshop · Randshop

Name of the Vulnerable Software and Affected Versions: Randshop affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the kategorieid and katid parameters in the themes/kategorie/index.php file. Recommendations: At t...

FreeBSD : gaim -- malicious smiley themes (635bf5f4-26b7-11d9-9289-000c41e2cdad)

The Gaim Security Issues page documents a problem with installing smiley themes from an untrusted source : To install a new smiley theme, a user can drag a tarball from a graphical file manager, or a hypertext link to one from a web browser. When a tarball is dragged, Gaim executes a shell comman...