CVE-2007-5801

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

Sql injection

Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the CategoryID parameter to ajax/sortcategories.php or 2 an unspecified vector to ajax/sortroles.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter to 1 certinfo/index.php, 2 emails/index.php, 3 events/index.php, 4 fax/index.php, 5 files/index.php, 6...

PHP Project Management <= 0.8.10 Multiple RFI / LFI Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== PHP Project Management = 0.8.10 Multiple RFI / LFI Vulnerabilities =================================================================== PHP Project Management = 0.8.10...

PHP Project Management 0.8.10 - Multiple LocalRemote File Inclusions

PHP Project Management 0.8.10 - Multiple LocalRemote File Inclusions PHP Project Management = 0.8.10 Multiple RFI / LFI Vulnerabilities http://surfnet.dl.sourceforge.net/sourceforge/php-pm/release-0.8.tar.gz DORK : "PHP Project Management 0.8.10" POC : RFI...

Vanilla 1.1.3 - Blind SQL Injection

Vanilla 1.1.3 - Blind SQL Injection = 4.1, magicquotesgpc=Off Tested on versions 1.1.3, 1.1.2, 1.0.1 echo "------------------------------------------------------------\n"; echo "Vanilla - use specific prefix default LUM\n"; echo "-id= - use specific user id default 1\n"; echo "-c= - benchmark's...

openSUSE 10 Security Update : mediawiki (mediawiki-3065)

This update fixes a cross site scripting XSS bug in the AJAX features CVE-2007-0177. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mediawiki-3065. The text description of this plugin is C SU...

openSUSE 10 Security Update : mediawiki (mediawiki-2457)

This update fixes a cross-site-scripting vulnerability when the AJAX module is enabled it is switched off by default and allows the execution of JavaScript code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...

DWR debug mode is enabled

This gives a potential attacker lots of information about available AJAX request handlers in Confluence...

DWR debug mode is enabled

This gives a potential attacker lots of information about available AJAX request handlers in Confluence...

DWR debug mode is enabled

This gives a potential attacker lots of information about available AJAX request handlers in Confluence...

Immunity Canvas: AJAXFB_INCLUDE

Name| ajaxfbinclude ---|--- CVE| CVE-2007-4921 Exploit Pack| CANVAS Description| Ajax File Browser 3 Beta Remote File Inclusion Notes| CVE Name: CVE-2007-4921 VENDOR: Ajax File Browser Notes: None Repeatability: Infinite References: http://securityreason.com/exploitalert/2767 CVE Url:...

CVE-2007-4921

PHP remote file inclusion vulnerability in includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter...

CVE-2007-4921

PHP remote file inclusion vulnerability in includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter...

CVE-2007-4921

Concretely, CVE-2007-4921 affects Ajax File Browser 3 Beta and is a PHP remote file inclusion in _includes/settings.inc.php via the approot parameter, allowing remote code execution. Connected advisories note a lack of input sanitization; an Immunity CANVAS entry references an AJAXFB_INCLUDE expl...

Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability

No description provided by source. Ajax File Browser 3 Beta Remote File Inclusion found by the "arfis project" http://arfis.wordpress.com/ Project Info: ------------- Name: Ajax File Browser Link: http://sourceforge.net/projects/ajaxfb/ DL:...

Ajax File Browser 3b - settings.inc.php?approot Remote File Inclusion

Ajax File Browser 3b - settings.inc.php?approot Remote File Inclusion Ajax File Browser 3 Beta Remote File Inclusion found by the "arfis project" http://arfis.wordpress.com/ Project Info: ------------- Name: Ajax File Browser Link: http://sourceforge.net/projects/ajaxfb/ DL:...

Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability

No description provided by source. Ajax File Browser 3 Beta Remote File Inclusion found by the "arfis project" http://arfis.wordpress.com/ Project Info: ------------- Name: Ajax File Browser Link: http://sourceforge.net/projects/ajaxfb/ DL:...

Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability

Exploit for unknown platform in category web applications ================================================================= Ajax File Browser 3b settings.inc.php approot RFI Vulnerability ================================================================= Ajax File Browser 3 Beta Remote File...