3332 matches found
PHP iCalendar Cookie Data Traversal Local File Inclusion
The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The version of PHP iCalendar installed on the remote host fails to sanitize input to cookie data normally used to store language and template user preferences before using it in a PHP...
vbulletinXSSpasswd.txt
Summary Software: vBulletin Sowtwares Web Site: http://www.vBulletin.com Versions: 3.0.12-3.5.3 Class: Remote Status: Unpatched Exploit: Available Solution: Available Discovered by: imei addmimistrator Risk Level: Mediume -Description- There is a security bug in most powerfull & common...
SquirrelMail < 1.4.7 Multiple Vulnerabilities
Binary data 3441.prm...
miniBloggie 1.0 - login.php SQL Injection
miniBloggie 1.0 - login.php SQL Injection source: https://www.securityfocus.com/bid/16367/info miniBloggie is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...
VEGO Web Forum 1.x - Theme_ID SQL Injection
VEGO Web Forum 1.x - ThemeID SQL Injection source: https://www.securityfocus.com/bid/16107/info VEGO Web Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
AlmondSoft Products SQL inj.
AlmondSoft Products SQL inj. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/almondsoft-products-sql-inj.html vendor:http://www.almondsoft.com/ affected products: Almond Classifieds 5.02 and Pro edition,Standart edition,E-Commerce Edition. and...
ScareCrow Message Board XSS vuln.
ScareCrow Message Board XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/scarecrow-message-board-xss-vuln.html vendor:http://scarecrow.sourceforge.net/ affected version:2.13 and prior Product Description: ScareCrow is a fully featured and...
PHP-Fusion 6.0.109 - 'messages.php' SQL Injection
source: https://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
Instant Photo Gallery 1.0 - content.php?cid SQL Injection
Instant Photo Gallery 1.0 - content.php?cid SQL Injection source: https://www.securityfocus.com/bid/15659/info Instant Photo Gallery is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...
SoftBiz B2B trading Marketplace Script 1.1 - selloffers.php?cid SQL Injection
SoftBiz B2B trading Marketplace Script 1.1 - selloffers.php?cid SQL Injection source: https://www.securityfocus.com/bid/15652/info Softbiz B2B Trading Marketplace is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...
Bedeng PSP 1.1 - 'baca.php?ckode' SQL Injection
source: https://www.securityfocus.com/bid/15583/info Bedeng PSP is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
Babe Logger 2.0 - 'comments.php?id' SQL Injection
source: https://www.securityfocus.com/bid/15580/info Babe Logger is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
Vote Caster 3.x SQL Inj. Vuln.
Vote Caster 3.x SQL Inj. Vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/vote-caster-3x-sql-inj-vuln.html Vendor:http://www.comdevweb.com/ Product link:http://www.comdevweb.com/votecaster.php affected version: 3.1 and prior. Vuln. Description:...
[SECURITY] [DSA 897-1] New phpsysinfo packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 897-1 [email protected] http://www.debian.org/security/ Martin Schulze November 15th, 2005 http://www.debian.org/security/faq -...
GCards 1.43 - 'news.php' SQL Injection
source: https://www.securityfocus.com/bid/15216/info gCards is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
CubeCart 3.0.3 - 'cart.php?redir' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14962/info CubeCart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code execut...
WEBppliance ocw_login_username Parameter XSS
The remote host is running WEBppliance, a web hosting control panel for Windows and Linux from Ensim. The installed version of WEBppliance is prone to cross-site scripting attacks because it fails to sanitize user-supplied input to the 'ocwloginusername' parameter of the login script before using...
CMSimple index.php search Function XSS
The remote host is running CMSimple, a CMS written in PHP. The version of CMSimple installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to the search field. %NASLMINLEVEL 70300 Josh Zlatin-Amishav josh at ramat dot cc GPLv2 Chang...
Woltlab Burning Board 2.x - ModCP.php SQL Injection
Woltlab Burning Board 2.x - ModCP.php SQL Injection source: https://www.securityfocus.com/bid/14617/info Woltlab Burning Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...
PHPFreeNews 1.40 - 'searchresults.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/14590/info PHPFreeNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...