EUVD-2007-3757

Malware in sbrugna...

EUVD-2007-3502

Malware in sbrugna...

EUVD-2008-0697

Malware in sbrugna...

YouTube Clone Script (spages.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle =...

youtubeclone-exec.txt

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

YouTube Clone Script - spages.php Remote Code Execution

YouTube Clone Script - spages.php Remote Code Execution !/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle =...

YouTube Clone Script (spages.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =============================================================== YouTube Clone Script spages.php Remote Code Execution Exploit =============================================================== !/usr/bin/perl inphex /siteadmin/spages.php...

YouTube Clone Script - 'spages.php' Remote Code Execution

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

CVE-2008-0687

Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...

CVE-2008-0687

CVE-2008-0687 affects the Youtube Clone Script. Affected component: siteadmin/editor_files/includes/load_message.php. Vulnerability: cross-site scripting (XSS) via the lang[please_wait] parameter, enabling remote attackers to inject arbitrary web script or HTML. Impact stated: partial confidentia...

CVE-2008-0687

Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...

CVE-2008-0687: Improper Control of Generation of Code

Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...

youtubeclone-xss.txt

Discovered by Smasher CMS: Youtube Clone Script Site: http://warwolfz.altervista.org WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: Ex:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

CVE-2007-3773 involves a CSRF flaw in the Email-Template module of a Generic YouTube Clone Script. The vulnerability enables remote attackers to cause administrators to upload files with arbitrary types to templates/emails/. The documents confirm the affected component (Email-Template module) and...

CVE-2007-3773: Improper Control of Generation of Code

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3518

SQL injection vulnerability in msg.php in HispaH YouTube Clone Script youtubeclone allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3518

CVE-2007-3518 describes an SQL injection in msg.php of the HispaH YouTube Clone Script (youtubeclone). The vulnerability arises from unsafely handling the id parameter, allowing remote attackers to execute arbitrary SQL commands. This is documented in NVD and CVE records, with publicly referenced...

CVE-2007-3518: Undefined Security Weakness

SQL injection vulnerability in msg.php in HispaH YouTube Clone Script youtubeclone allows remote attackers to execute arbitrary SQL commands via the id parameter...