Tremulous: User-assisted execution of arbitrary code

Background Tremulous is a team-based First Person Shooter game. Description It has been reported that Tremulous includes a vulnerable version of the ioQuake3 engine GLSA 200605-12, CVE-2006-2236. Impact A remote attacker could entice a user to connect to a malicious games server, possibly resulti...

PRTG Traffic Grapher 6.2.1 - 'url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40630/info PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Plunet BusinessManager 4.1 - pagesUTF8Sys_DirAnzeige.jsp?Pfad Direct Request Information Disclosure

Plunet BusinessManager 4.1 - pagesUTF8SysDirAnzeige.jsp?Pfad Direct Request Information Disclosure source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplie...

Mini File Host 1.x Arbitrary PHP File Upload Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected] Vulnerability ...

Incredimail Malformed MIME Message DoS Vulnerability

Incredimail is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CFAGCMS Remote File Inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: CFAGCMS Remote File Inclusion Vendor: http://sourceforge.net/projects/cfagcms/ Bug: Remote File Inclusion Vulnerable Version: 1 Exploitation: Remote with browser Fix: N/A Original Advisory: http://www.bugreport.ir/index58.htm - Description:...

PHPepperShop 1.4 Cross Site Scripting

Vulnerable Version:PHPepperShop v 1.4 Homepage:http://www.phpeppershop.com This is 4 reflective XSS flaws in the URI. Trust no one not even your $SERVERPHPSELF http://10.1.1.10/shop/kontakt.php/'alert1 http://10.1.1.10/index.php/%22%3Cscript%3Ealert1%3C/script%3E...

Pre Classified Listings 1.0 - signup.asp Cross-Site Scripting

Pre Classified Listings 1.0 - signup.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/32567/info Pre Classified Listings is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Enthusiast 3 Remote Code Execution

www.BugReport.ir AmnPardaz Security Research Team Title: Enthusiast 3 Remote Code Execution Vendor: http://scripts.indisguise.org/enthusiast/ Bug: File Inclusion Vulnerable Version: 3.1.4 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original Advisory:...

enthusiast-exec.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Enthusiast 3 Remote Code Execution Vendor: http://scripts.indisguise.org/enthusiast/ Bug: File Inclusion Vulnerable Version: 3.1.4 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original Advisory:...

MoinMoin 1.5.81.9 - Cross-Site Scripting Information Disclosure

MoinMoin 1.5.81.9 - Cross-Site Scripting Information Disclosure source: https://www.securityfocus.com/bid/32208/info MoinMoin is prone to cross-site scripting and information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issue...

MoinMoin 1.5.8/1.9 - Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/32208/info MoinMoin is prone to cross-site scripting and information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

V3 Chat ProfilesDating Script 3.0.2 - Authentication Bypass

V3 Chat ProfilesDating Script 3.0.2 - Authentication Bypass V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ----------------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High...

Enthusiast 3.1.4 - 'show_joined.php' Remote File Inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: Enthusiast 3 Remote Code Execution Vendor: http://scripts.indisguise.org/enthusiast/ Bug: File Inclusion Vulnerable Version: 3.1.4 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original Advisory:...

Enthusiast 3.1.4 - show_joined.php Remote File Inclusion

Enthusiast 3.1.4 - showjoined.php Remote File Inclusion www.BugReport.ir AmnPardaz Security Research Team Title: Enthusiast 3 Remote Code Execution Vendor: http://scripts.indisguise.org/enthusiast/ Bug: File Inclusion Vulnerable Version: 3.1.4 prior versions also may be affected Exploitation:...

apcupsd < 3.8.6 / 3.10.x < 3.10.5 Multiple Vulnerabilities

apcupsd is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apc:apcupsd"; ifdescription...

Monster Top List Remote File Include

The remote web server is running Monster Top List which is affected by a remote file include vulnerability. SPDX-FileCopyrightText: 2008 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2008-4671

Cross-site scripting XSS vulnerability in wp-admin/wp-blogs.php in Wordpress MU WPMU before 2.6 allows remote attackers to inject arbitrary web script or HTML via the 1 s and 2 ipaddress parameters...

Dart Communications PowerTCP FTP module - Remote Buffer Overflow

Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in your programs to perform common TCP/IP functions, including FTP,...

Dart Communications PowerTCP FTP module - Remote Buffer Overflow

Dart Communications PowerTCP FTP module - Remote Buffer Overflow Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in...