Lucene search
+L

181 matches found

Packet Storm
Packet Storm
added 2010/06/16 12:00 a.m.24 views

Athena-gs.fr Cross Site Scripting

+-----------------------------------------------------------+ | Stupid XSS + "Auth ByPass" athena-gs.fr | +-----------------------------------------------------------+ | Author : FlUxIuS from Slashon and HandGrep | | Date : 14/06/2010 | +-----------------------------------------------------------...

SaveExploits0
xssed
xssed
added 2008/08/16 12:00 a.m.9 views

Unfixed XSS vulnerability at www.athena-gs.fr

Security researcher xylitol, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.athena-gs.fr, which at the time of submission ranked 4937181 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is...

SaveExploits0References1
OpenVAS
OpenVAS
added 2008/01/17 12:00 a.m.14 views

Debian Security Advisory DSA 037-1 (nextaw, xaw3d, xaw95)

The remote host is missing an update to nextaw, xaw3d, xaw95 announced via advisory DSA 037-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.4AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2005/11/30 12:00 a.m.43 views

athena.txt

Language: PHP Script: Athena Version: 0.1a Official website: http://sourceforge.net/projects/athena Problem: Remote file inclusion Discovered by: beford & GB Description: =========== A simple website management system written in oo php that uses a mysql database to store user and group rights and...

7.4AI score
SaveExploits0
NVD
NVD
added 2005/11/29 11:03 a.m.21 views

CVE-2005-3860

PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote attackers to execute arbitrary PHP code via a URL in the athenadir parameter...

7.5CVSS7.5AI score0.03289EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2005/11/29 11:00 a.m.24 views

CVE-2005-3860

PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote attackers to execute arbitrary PHP code via a URL in the athenadir parameter...

7.5AI score0.03289EPSS
SaveExploits2References6
CVE
CVE
added 2005/11/29 11:00 a.m.60 views

CVE-2005-3860

The CVE-2005-3860 entry describes a PHP remote file inclusion vulnerability in Oliver May Athena PHP Website Administration 0.1a, exploitable via a URL in the athena_dir parameter to execute arbitrary PHP code. Connected sources confirm the affected product/variant and the root cause (RFI in athe...

7.5CVSS7.9AI score0.03289EPSS
SaveExploits2References6Affected Software1
securityvulns
securityvulns
added 2005/11/28 12:00 a.m.93 views

Remote file include in Athena

Language: PHP Script: Athena Version: 0.1a Official website: http://sourceforge.net/projects/athena Problem: Remote file inclusion Discovered by: beford & GB Description: =========== A simple website management system written in oo php that uses a mysql database to store user and group rights and...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/11/26 12:00 a.m.21 views

Athena PHP Website Administration 0.1 - Remote File Inclusion

source: https://www.securityfocus.com/bid/15574/info Athena PHP Website Administration is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP co...

7.5CVSS5.8AI score0.03289EPSS
SaveExploits2
exploitpack
exploitpack
added 2005/11/26 12:00 a.m.25 views

Athena PHP Website Administration 0.1 - Remote File Inclusion

Athena PHP Website Administration 0.1 - Remote File Inclusion source: https://www.securityfocus.com/bid/15574/info Athena PHP Website Administration is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:00 a.m.29 views

Athena Web Registration remote command execution flaw

The remote host is running Athena Web server. The remote version of this software is vulnerable to remote command execution flaw through the athenareg.php script. A malicious user could execute arbitrary commands on the remote host. OpenVAS Vulnerability Test $Id: athenawebremotecmdexec.nasl 8023...

7.5CVSS0.8AI score0.28596EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2005/11/03 12:00 a.m.27 views

Athena Web Registration remote command execution flaw

The remote version of tAthena Web server is vulnerable to a remote command execution flaw through the athenareg.php script. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS7AI score0.28596EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2005/05/27 12:00 a.m.61 views

Athena Web Registration athenareg.php pass Parameter Command Execution

The remote host is running Athena Web server. The remote version of this software allows for execution of arbitrary commands through the script 'athenareg.php'. A malicious user could exploit this issue to execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network...

7.5CVSS6.2AI score0.28596EPSS
SaveExploits2References1
CVE
CVE
added 2005/05/10 4:00 a.m.58 views

CVE-2004-1782

Athena Web Registration (athenareg.php) is vulnerable to remote command execution via shell metacharacters in the pass parameter. Descriptions from CVE-2004-1782 and OpenVAS/Nessus reports confirm a remote-code-execution flaw in the Athena Web Registration server, allowing arbitrary commands to b...

7.5CVSS7.7AI score0.28596EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2005/05/10 4:00 a.m.23 views

CVE-2004-1782

athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter...

7.6AI score0.28596EPSS
SaveExploits2References2
NVD
NVD
added 2004/12/31 5:00 a.m.17 views

CVE-2004-1782

athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter...

7.5CVSS7.6AI score0.28596EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2004/09/29 12:00 a.m.19 views

Debian DSA-037-1 : Athena Widget replacement libraries - insecure tempfile handling

It has been reported that the AsciiSrc and MultiSrc widget in the Athena widget library handle temporary files insecurely. Joey Hess has ported the bugfix from XFree86 to these Xaw replacements libraries. The fixes are available in nextaw 0.5.1-34potato1, xaw3d 1.3-6.9potato1, and xaw95...

5.4AI score
SaveExploits0References1
exploitpack
exploitpack
added 2004/01/02 12:00 a.m.11 views

Athena Web Registration - Remote Command Execution

Athena Web Registration - Remote Command Execution source: https://www.securityfocus.com/bid/9349/info A problem has been reported in the handling of user-supplied input by the Athena Web Registration scripts. Because of this, it may be possible for an attacker to gain unauthorized access to a...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2004/01/02 12:00 a.m.28 views

Athena Web Registration - Remote Command Execution

source: https://www.securityfocus.com/bid/9349/info A problem has been reported in the handling of user-supplied input by the Athena Web Registration scripts. Because of this, it may be possible for an attacker to gain unauthorized access to a vulnerable system...

7.5CVSS5.8AI score0.28596EPSS
SaveExploits2
securityvulns
securityvulns
added 2001/03/11 12:00 a.m.32 views

Дырки в Athena Widget

Проблема временных файлов...

0.6AI score
SaveExploits0References1
Rows per page
Query Builder