OpenBASE 0.6a - root_prefix Remote File Inclusion

OpenBASE 0.6a - rootprefix Remote File Inclusion DeltaSecurityTEAM WwW.DeltaSecurity.iR Portal Name = OpenBASE Alpha 0.6 Class = Remote File Inclusion Risk = High Remote File Execution Download = Http://openbase.sourceforge.net Discoverd By = DeltahackingTEAM User In Delta Team = Dav00dCracker...

OpenBASE 0.6a (root_prefix) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= OpenBASE 0.6a rootprefix Remote File Inclusion Vulnerabilities ================================================================= DeltaSecurityTEAM Portal Name = OpenBASE Alp...

[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the systemsmartydir parameter...

CVE-2007-2608

PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the systemsmartydir parameter...

CVE-2007-2608

CVE-2007-2608 is a PHP remote file inclusion vulnerability in Miplex2 Alpha 1. The flaw resides in lib/smarty/SmartyFU.class.php, allowing an attacker to execute arbitrary PHP code via a URL in the system[smarty][dir] parameter. CVSS2 base score 7.5 (HIGH) with network attack vector and low attac...

CVE-2007-2503

PHP Turbulence 0.0.1 alpha is affected by a directory-traversal in turbulence.php via GLOBALS[tcore], allowing potential local file inclusion/execution. The issue stems from using a dot-dot path, with a note that a direct request to user/turbulence.php may trigger a fatal error before inclusion. ...

PT-2007-3828 · Php · Php Turbulence

Name of the Vulnerable Software and Affected Versions: PHP Turbulence version 0.0.1 alpha Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALStcore parameter in the user/turbulence.php file. However, this vulnerability is disputed because a direct...

PT-2007-3827 · Php · Php Turbulence

Name of the Vulnerable Software and Affected Versions: PHP Turbulence version 0.0.1 alpha Description: A directory traversal issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALStcore parameter. This issue is disputed due to a fatal error...

CVE-2007-2265

CVE-2007-2265 is an XSS vulnerability in YA Book 0.98-alpha, exploitable through the City field in a sign action in index.php. The available documents indicate remote script/HTML injection leading to partial confidentiality/integrity/availability impact as described by CVSS metrics, but no patch ...

CVE-2007-2265

Cross-site scripting XSS vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php...

YA Book Persistent XSS Bug

. . . . | . .| . .;/ || .| .net | .| "YA Book 0.98-alpha - Persistent XSS Vulnerability" by Omni 1 Infos --------- Date : 2007-04-23 Product : YA Book Version : 0.98-alpha - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/yabook - http://www.phpee.com/ Vendor Status ...

NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities

NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities Vulnerable: NuclearBB Alpha 1 Google d0rk: "This forum is powered by NuclearBB" ============= String Inputs ============= ---------------------------- login.php - $POST'submit' ---------------------------- username=xyz...

PHP Turbulence 0.0.1 - Turbulence.php Remote File Inclusion

PHP Turbulence 0.0.1 - Turbulence.php Remote File Inclusion source: https://www.securityfocus.com/bid/23580/info PHP Turbulence is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise t...

PHP Turbulence 0.0.1 - 'Turbulence.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/23580/info PHP Turbulence is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

nuclearbb-sql.txt

NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities Vulnerable: NuclearBB Alpha 1 Google d0rk: "This forum is powered by NuclearBB" ============= String Inputs ============= ---------------------------- login.php - $POST'submit' ---------------------------- username=xyz...

Unfixed XSS vulnerability at www.alphaomegahosting.com

Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting www.alphaomegahosting.com, which at the time of submission ranked 962622 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is...

[SECURITY] [DSA 1274-1] New file packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1274-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 02, 2007 - ------------------------------------------------------------------------ Package : file Vulnerability :...

CVE-2007-1514

PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the modpath parameter...

WWWboard password disclosure

//A vulnerability found in WWWboard that shows the administrative user names and passwords. Althought the password is hashed, It can easily be decoded. //Effected versions: Version 2.0 ALPHA 2 //File name: passwd.txt //File location: http://victim/wwwboard/passwd.txt //Google dork:...