1593 matches found
CVE-2006-6871
CVE-2006-6871 affects eNdonesia 8.4 with four XSS vectors : (1) mod.php viewlink parameter (mod), (2) informasi module showinfo intypeid, (3) the "your Friend" field in friend.php, (4) the "Main Text" field in admin.php. The vulnerability allows remote attackers to inject arbitrary web script or ...
CVE-2006-6871
Multiple cross-site scripting XSS vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter in a viewlink operation in mod.php, 2 the intypeid parameter in a showinfo operation in the informasi module in mod.php, 3 the "your Friend" fie...
eNdonesia 8.4 (mod.php/friend.php/admin.php) Multiple Vulnerabilities
No description provided by source. bugs for Endonesia8.4 FInd:z1ckXru mail:[email protected] 1 http://localhost/en/mod.php?mod=XSS&op=viewlink&cid=5 2 http://localhost/en/friend.php your Friend:XSS 3 http://localhost/en/admin.php Main Text: XSS 4...
eNdonesia 8.4 - mod.phpfriend.phpadmin.php Multiple Vulnerabilities
eNdonesia 8.4 - mod.phpfriend.phpadmin.php Multiple Vulnerabilities bugs for Endonesia8.4 FInd:z1ckXru mail:[email protected] 1 http://localhost/en/mod.php?mod=XSS&op=viewlink&cid=5 2 http://localhost/en/friend.php your Friend:XSS 3 http://localhost/en/admin.php Main Text: XSS 4...
eNdonesia 8.4 (mod.php/friend.php/admin.php) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== eNdonesia 8.4 mod.php/friend.php/admin.php Multiple Vulnerabilities ===================================================================== bugs for Endonesia8.4...
CVE-2006-6284
Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. dot dot sequence in the act parameter...
CVE-2006-6284
Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. dot dot sequence in the act parameter...
CVE-2006-6284
CVE-2006-6284 affects Vikingboard 0.1.2. A directory traversal vulnerability in the file admin.php allows remote authenticated administrators to include arbitrary files via a .. sequence in the act parameter. According to NVD, the vulnerability has a CVSS v2 base score of 9.0 (HIGH) with network ...
CVE-2006-6284
Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. dot dot sequence in the act parameter...
CVE-2006-6176
Cross-site scripting XSS vulnerability in admin.php in Blogn before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2006-6176
CVE-2006-6176 describes a Cross-site Scripting (XSS) vulnerability in Blogn’s admin.php in versions before 1.9.4, allowing remote attackers to inject arbitrary script/HTML via unspecified parameters. The NVD entry lists a base score of 6.8 (Medium) with network attack vector and no authentication...
Pearl Forums 2.4 Multiple Remote File Include Vulnerabilities
| | / | / | | | | | / | / / | | | | '| | |/| |/ / / / / | | '| | | / | | || | | | | | | | | / | | | | || |/|| || ||,// / ||| ,|/ ///////////////////////////////////////////////////////////////////////////////////////////////////////////// //Script:Pearl Forums //Author: Dr Max Virus...
CVE-2006-5804
CVE-2006-5804 is a PHP remote file inclusion vulnerability in Advanced Guestbook 2.3.1 (admin.php) that allows an attacker to execute arbitrary PHP code via a URL supplied to the include_path parameter. The PT-2006-6481 entry for the same product version 2.3.1 corroborates this vector, detailing ...
PT-2006-6481 · Unknown · Advanced Guestbook
Name of the Vulnerable Software and Affected Versions: Advanced Guestbook version 2.3.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter in the admin.php file. Recommendations: For Advanced Guestbook version 2.3.1, consider...
Advanced Guestbook 2.3.1 (Admin.php) Remote File Include
Advanced Guestbook 2.3.1 Admin.php Remote File Include Author: BrokeN-ProXy Script : admin.php Found : www.hotscripts.com Risk : Dangerous Dork : "powered by: Advanced Guestbook 2.3.1" Exploit: www.Site.com/AGuest Path/admin.php?includepath=Shell?cmd Notice: AGuest Path may be more than One, You...
P-Book <= 1.17 (pb_lang) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== P-Book = 1.17 pblang Remote File Inclusion Vulnerabilities ============================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / ...
P-Book 1.17 - 'pb_lang' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...
CVE-2006-5451
Multiple cross-site scripting XSS vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 action, 2 file, and 3 users array variables in a admin.php, which are not properly handled when the administrator views the Activity Log; and the 4 torrent...
CVE-2006-5451
CVE-2006-5451 describes multiple XSS flaws in TorrentFlux 2.1. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via: (1) admin.php parameters (action, file, users array) when viewing the Activity Log, and (2) startpop.php torrent parameter used by displayName. The vector...
Easynews <= 4.4.1 (admin.php) Authentication Bypass Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + Easynews = 4.4.1 admin.php Authentication Bypass Vulnerability +------------------------------------------------------------------------------------------- + Affected...