CVE-2008-0917: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cgi aka Quotes of the Day 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Interactive BBS 1.3 and earlier, Tor Board 1.1 and earlier,...

JVN#54593414 Cross-site scripting vulnerability in multiple Tor World CGI scripts

Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a cross-site scripting vulnerability. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest update...

Unfixed XSS vulnerability at bbs.52tn.cn

Security researcher BackDoor, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting bbs.52tn.cn, which at the time of submission ranked 114126 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at bbs.20ju.com

Security researcher BackDoor, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting bbs.20ju.com, which at the time of submission ranked 39350 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at bbs.2ch2.net

Security researcher kusomiso.com, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting bbs.2ch2.net, which at the time of submission ranked 28227 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Remote file inclusion

PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute arbitrary PHP code via a URL in the pmode parameter...

CVE-2007-3934

PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute arbitrary PHP code via a URL in the pmode parameter...

CVE-2007-3934

CVE-2007-3934 describes a PHP remote file inclusion in the BBS E-Market product, specifically the file w/postscript/postscript.php, exploitable via a URL parameter p_mode to execute arbitrary PHP code. The vulnerability is network-exploitable with low attack complexity and no authentication, yiel...

CVE-2007-3934

PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute arbitrary PHP code via a URL in the pmode parameter...

CVE-2007-3934: Undefined Security Weakness

PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute arbitrary PHP code via a URL in the pmode parameter...

BBS E-Market (postscript.php p_mode) Remote File Inclusion Vulnerability

No description provided by source. dork:inurl:bemarket xpl:/bemarket/postscript/postscript.php?pmode= original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=80 Greetz:d3hydr8,whoami [email protected] [email protected] sebug.net...

BBS E-Market (postscript.php p_mode) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== BBS E-Market postscript.php pmode Remote File Inclusion Vulnerability ======================================================================== dork:inurl:bemarket...

BBS E-Market - postscript.php?p_mode Remote File Inclusion

BBS E-Market - postscript.php?pmode Remote File Inclusion dork:inurl:bemarket xpl:/bemarket/postscript/postscript.php?pmode= original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=80 Greetz:d3hydr8,whoami [email protected] [email protected] milw0rm.com...

BBS E-Market - 'postscript.php?p_mode' Remote File Inclusion

dork:inurl:bemarket xpl:/bemarket/postscript/postscript.php?pmode= original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=80 Greetz:d3hydr8,whoami [email protected] [email protected] milw0rm.com 2007-07-18...

CVE-2007-2544

PHP remote file inclusion vulnerability in templates/default/tplmessage.php in PHP TopTree BBS 2.0.1a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rightfile parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in templates/default/tplmessage.php in PHP TopTree BBS 2.0.1a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rightfile parameter...

CVE-2007-2544

PHP remote file inclusion vulnerability in templates/default/tplmessage.php in PHP TopTree BBS 2.0.1a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rightfile parameter...

CVE-2007-2544

The CVE-2007-2544 entry affects PHP TopTree BBS versions up to 2.0.1a, with a remote file inclusion in templates/default/tpl_message.php. The underlying issue allows an attacker to supply a URL in the right_file parameter and cause the application to execute remote PHP code, enabling arbitrary co...

CVE-2007-2544: Undefined Security Weakness

PHP remote file inclusion vulnerability in templates/default/tplmessage.php in PHP TopTree BBS 2.0.1a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rightfile parameter...

PHP TopTree BBS 2.0.1a (right_file) Remote File Inclusion Vulnerability

No description provided by source. TopTree BUG: Example:http://site.com/path/templates/default/tplmessage.php?rightfile=Sh3LL Script Script Download http://sourceforge.net/project/showfiles.php?groupid=169574&packageid=193438&releaseid=426108 Original W3b Site http://www.dvhome.cn Special Thanks:...