430 matches found
W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities
source: https://www.securityfocus.com/bid/23055/info w-Agora is prone to multiple arbitrary file-upload vulnerabilities. An attacker can exploit these vulnerabilities to upload PHP script code and execute it in the context of the webserver process. w-Agora 4.2.1 is vulnerable. ?php / Title...
w-agora version 4.2.1 Information Disclosure Vulnerability
netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...
Vulnerabilities в W-Agora
Здравствуйте 3APA3A! Сообщаю вам о найденных мною 22.11.2006 уязвимостях в W-Agora 4.1.5 = 4.1.5. Это Cross-Site Scripting, SQL DB Structure Extraction та Full path disclosure уязвимости. Уязвимости в скрипте search.php3. XSS:...
Update Protection against W-Agora 'inc_dir' Parameter Remote File Inclusion Vulnerabilities
W-Agora is an open source web publishing and forum software. It allows web administrators and their visitors to store and display messages, files, share discussions and other information on the web site. W-Agora is prone to multiple remote file inclusion vulnerabilities. An attacker can exploit...
Agora 1.4 RC1 (MysqlfinderAdmin.php) Remote File Include Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File...
Echo Security Advisory 2006.59
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...
Agora 1.4 RC1 - MysqlfinderAdmin.php Remote File Inclusion
Agora 1.4 RC1 - MysqlfinderAdmin.php Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1...
Agora 1.4 RC1 (MysqlfinderAdmin.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Agora 1.4 RC1 MysqlfinderAdmin.php Remote File Include Vulnerability ====================================================================== \ /\ \ / | \ \ | / \ // / |...
[ECHO_ADV_59_2006]Agora 1.4 RC1 "$_SESSION[PATH_COMPOSANT]" Remote File Inclusion Vulnerability
----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------------- Author : Dedi...
Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...
Echo Security Advisory 2006.34
ECHO.OR.ID ECHOADV34$2006 --------------------------------------------------------------------------------------------------- ECHOADV34$2006 W-Agora Web-Agora = 4.2.0 incdir Remote File Inclusion ---------------------------------------------------------------------------------------------------...
[ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion
ECHO.OR.ID ECHOADV34$2006 --------------------------------------------------------------------------------------------------- ECHOADV34$2006 W-Agora Web-Agora = 4.2.0 incdir Remote File Inclusion ---------------------------------------------------------------------------------------------------...
w-Agora inc_dir Parameter Remote File Inclusion
The remote host is running w-Agora, a web-based forum software written in PHP. The version of w-Agora installed on the remote host fails to sanitize input to the 'incdir' parameter before using it in several scripts to include PHP code. Provided PHP's 'registerglobals' setting is disabled, an...
w-Agora 4.2.0 - inc_dir Remote File Inclusion
w-Agora 4.2.0 - incdir Remote File Inclusion !/usr/bin/perl W-Agora perl wagora.pl http://target.com/w-agora/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...
w-Agora <= 4.2.0 (inc_dir) Remote File Include Exploit
Exploit for unknown platform in category web applications ====================================================== w-Agora perl wagora.pl http://target.com/w-agora/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...
w-Agora <= 4.2.0 (inc_dir) Remote File Include Exploit
No description provided by source. !/usr/bin/perl W-Agora = 4.2.0 incdir Remote File Inclusion Exploit Bug Found & code By dedi.dwianto aka theday base on advisory at http://advisories.echo.or.id/adv/adv34-theday-2006.txt www.echo.or.id c 2006 usage: perl wagora.pl target cmd shell location cmd...
CVE-2006-2228
CVE-2006-2228 affects w-Agora (Web-Agora) 4.2.0 with a cross-site scripting (XSS) flaw: a BBCode tag containing a JavaScript event name followed by whitespace before the = character bypasses the regex intended to remove onmouseover/events, enabling remote script execution. The provided documents ...
CVE-2006-2228
Cross-site scripting XSS vulnerability in w-Agora aka Web-Agora 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' equals character, which bypasses a restrictive regular...
W-Agora 4.20 XSS
PLEASE NOTE: I am not sure if HTML is an option. I looked through the Administration panel and did not see an option for it, and the fact that there is no BBcode leads me to believe that this is the method of BBCode/etc. W-Agora is a fairly 'nice' bulletin board written in PHP. It allows multiple...
W-Agora 4.2 - BBCode Script Injection
W-Agora 4.2 - BBCode Script Injection source: https://www.securityfocus.com/bid/17751/info W-Agora is prone to a script-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated content. W-Agora...