Magic News Plus 1.0.2 - news.php?link_parameters Cross-Site Scripting

Magic News Plus 1.0.2 - news.php?linkparameters Cross-Site Scripting source: https://www.securityfocus.com/bid/22661/info Magic News Pro is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These issues include a remote...

Magic News Plus 1.0.2 - 'news.php?&link_parameters' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22661/info Magic News Pro is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These issues include a remote file-include issue and two cross-site scripting vulnerabilities. An...

RPW 1.0.2 (config.php sql_language) Remote File Inclusion Vulnerability

No description provided by source. | | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------...

Vikingboard 0.1.2 - admin.php?act Traversal Arbitrary File Access

Vikingboard 0.1.2 - admin.php?act Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/21196/info Vikingboard is prone to multiple HTML-injection vulnerabilities and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data...

[Full-disclosure] WebCalendar User Account Enumeration Weakness

WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. See project homepage for details: http://www.k5n.us/webcalendar.php Description: The problem is that different...

CVE-2006-2052

Cross-site scripting XSS vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate, since the "viewpro" string does not appear in the...

PT-2006-2101 · Simplog · Simplog

Name of the Vulnerable Software and Affected Versions: Simplog versions 1.0.2 and earlier Description: A directory traversal issue exists, allowing remote attackers to include or read arbitrary .txt files. This is achieved via the act and blogid parameters in the index.php file. Recommendations:...

Simplog 1.0.2 - Information Disclosure

source: https://www.securityfocus.com/bid/16965/info Simplog is prone to an information-disclosure vulnerability. The application fails to properly sanitize user-supplied input. Attackers may exploit this issue to gain access to potentially sensitive information, aiding them in further attacks...

RCblog exploit [fun]

!/usr/bin/perl RCBlog 1.0.3 / 1.0.2 Exploit by Hessam-x www.hessamx.net Name : RCBlog www.fluffington.com version : 1.0.3 / 1.0.2 manual exploiting: index.php?20post=../config/password use LWP::Simple; print "-------------------------------------------n"; print "= RCBlog 1.0.3 / 1.0.2 =n"; print ...

[SA18805] DB_eSession "deleteSession()" Function SQL Injection

TITLE: DBeSession "deleteSession" Function SQL Injection SECUNIA ADVISORY ID: SA18805 VERIFY ADVISORY: http://secunia.com/advisories/18805/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: DBeSession 1.x http://secunia.com/product/8010/ DESCRIPTION: James...

Keene Digital Media Server 1.0.2 - Directory Traversal

Keene Digital Media Server 1.0.2 - Directory Traversal source: https://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using he...

Keene Digital Media Server 1.0.2 - Directory Traversal

source: https://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using hex encoded directory traversal character sequences to...

Subversion 1.0.2 - Date Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'msf/core/exploit/http'...

dsr-adv001.txt

on: attachment; filename="dsr-adv001.txt" -Dtors Security Research- - www.dtors.net - -Package: Firebird1.0.2 FreeBSD -Versions Affected: 1.0.2 -Website: http://firebird.sf.net -Exploit: Local Stack Overflow -Date: 22/03/2003 -Author: [email protected] && [email protected] ---BACKGROUND Firebird is a...

smallftpd's version 1.0.2 Directory Transversal Vulnerability

Smallftpd is a simple and small Ftp server for windows. A vulnerability exists in smallftpd v 1.02http://smallftpd.free.fr/ that allow unauthorizeded users to browse the root directorys and skip access list. CWD .... 250 CWD command successful. also smallftpd v0.99 avaliable to download at...

kf-1.2.txt

KF Web Server version 1.0.2 shows file and directory content .oO Overview Oo. KF Web Server version 1.0.2 shows file and directory content Discovered on 2002, July, 2nd Vendor: KeyFocus http://www.keyfocus.net/kfws/ KF Web Server 1.0.2 is a free personal web server available for Windows...

Key Focus KF Web Server 1.0.2 - Directory Contents Disclosure

source: https://www.securityfocus.com/bid/5177/info It has been reported that version 1.0.2 of KF Web Server discloses the contents of directories when a certain character is present in the URL. If a remote attacker appends the "%00" character, it will cause the web server to display the contents...