857 matches found
CVE-2008-1348: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in the eWebsite eWeather Weather module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the chart parameter to modules.php...
XSS in PHP-Nuke (eWeather module)
//////////XSS in PHP-Nuke eWeather module PHP-Nuke http://phpnuke.org: PHP-Nuke is a news automated system specially designed to be used in Intranets and Internet. The Administrator has total control of his web site, registered users, and he will have in the hand a powerful assembly of tools to...
Unfixed XSS vulnerability at www.nordicweather.net
Security researcher F3nix, has submitted on 31/01/2008 a cross-site-scripting XSS vulnerability affecting www.nordicweather.net, which at the time of submission ranked 1094493 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/02/2008. It is...
[SECURITY] Fedora 8 Update: xfce4-weather-plugin-0.6.2-2.fc8
A weather plugin for the Xfce panel. It shows the current temperature and weather condition, using weather data provided by xoap.weather.com...
[SECURITY] Fedora 7 Update: xfce4-weather-plugin-0.6.2-2.fc7
A weather plugin for the Xfce panel. It shows the current temperature and weather condition, using weather data provided by xoap.weather.com...
Directory traversal
Directory traversal vulnerability in index.php in InstaGuide Weather aka Weather for PHP 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PageName parameter...
CVE-2007-5674
Directory traversal vulnerability in index.php in InstaGuide Weather aka Weather for PHP 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PageName parameter...
CVE-2007-5674
Directory traversal vulnerability in index.php in InstaGuide Weather aka Weather for PHP 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PageName parameter...
CVE-2007-5674
CVE-2007-5674 concerns InstaGuide Weather (aka Weather for PHP) 1.0. a directory traversal flaw in index.php allows remote attackers to include and execute arbitrary local files through a .. in the PageName parameter when magic_quotes_gpc is disabled. Affected component is the web application’s i...
CVE-2007-5674: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in InstaGuide Weather aka Weather for PHP 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PageName parameter...
InstaGuide Weather Index.PHP文件包含漏洞
InstaGuide Weather是一款基于PHP的WEB应用程序。 InstaGuide Weather不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是'Index.PHP'脚本对用户提交的'PageName'参数缺少过滤，提交应用程序文件作为参数，可导致敏感信息泄露。 InstaGuide Weathe 目前没有解决方案提供： http://www.instaguide.com/index.php?PageName=products http://www.example.com/index.php?PageName=Local File%00...
InstaGuide Weather Script (index.php) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================== InstaGuide Weather Script index.php Local File Inclusion Vulnerability ======================================================================== Weather for PHP Dr.2 =...
weather-lfi.txt
Weather for PHP Dr.2 = 4ever .... =D...
InstaGuide Weather Script 1.0 - index.php Local File Inclusion
InstaGuide Weather Script 1.0 - index.php Local File Inclusion Weather for PHP Dr.2 = 4ever .... =D milw0rm.com 2007-10-22...
InstaGuide Weather Script (index.php) Local File Inclusion Vulnerability
No description provided by source. Weather for PHP = PageName Local File Include Vulnerability Script : Weather for PHP Version : 1.0 Download : http://www.instaguide.com/download/weatherfree.zip AUTHOR : BorN To K!LL Vuln Code : $PageName = $GET'PageName'; //// this is one ... :...
InstaGuide Weather Script 1.0 - 'index.php' Local File Inclusion
Weather for PHP Dr.2 = 4ever .... =D milw0rm.com 2007-10-22...
Microsoft Vista侧栏联系人及天气小工具远程代码执行漏洞（MS07-048）
BUGTRAQ ID: 25306,25304 CVECAN ID: CVE-2007-3891,CVE-2007-3032 Vista是微软发布的最新的操作系统。 Vista侧栏的联系人和天气小工具在解析某些属性时没有执行充分的验证，远程攻击者可能利用此漏洞通过诱使用户执行某些操作来控制系统。 如果用户在联系人小工具中导入添加了恶意的联系人文件，或单击了天气小工具中的恶意链接，就可能导致在系统上运行恶意代码。 Microsoft Windows Vista 临时解决方法： 卸载或禁用天气和联系人小工具 在“组策略”或注册表中禁用侧栏 修改gadget.xml上的访问控制列表以增加限制：...
Microsoft Windows Vista gadgets code execution
Code eexcution with "Contacts" and "Weather" gadgets...
Microsoft Windows Vista Weather Gadget vulnerability
Overview The Windows Vista Weather gadget contains a vulnerability that may allow and attacker to execute code. Description From Microsoft Security Bulletin MS07-048:Gadgets are mini-applications designed to provide the user with information or utilities. Windows Vista treats gadgets similar to t...