CVE-2007-5843

CVE-2007-5843 affects scWiki 1.0 Beta 2 with a PHP remote file inclusion in includes/common.php via the pathdot parameter, enabling remote code execution. Public exploit references exist (e.g., Exploit-DB), and Immunity CANVAS contains a scwiki_include module; no vendor patch details are provided...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in blockseditdo.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blocks as administrators...

CVE-2007-5818

Cross-site request forgery CSRF vulnerability in blockseditdo.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blocks as administrators...

scwiki-rfi.txt

scWiki 1.0 Beta 2 common.php pathdot Remote File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/sc-wiki/scwikibeta2.zip POC : /includes/common.php?pathdot=Shell...

scWiki 1.0 Beta 2 (common.php pathdot) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================= scWiki 1.0 Beta 2 common.php pathdot Remote File Inclusion Vuln ================================================================= scWiki 1.0 Beta 2 common.php pathdot Remote...

scWiki 1.0 Beta 2 - common.php?pathdot Remote File Inclusion

scWiki 1.0 Beta 2 - common.php?pathdot Remote File Inclusion scWiki 1.0 Beta 2 common.php pathdot Remote File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/sc-wiki/scwikibeta2.zip POC : /includes/common.php?pathdot=Shell milw0rm.com 2007-11-03...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS...

CVE-2007-5736

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS...

CVE-2007-5736

CVE-2007-5736 describes an Unrestricted file upload vulnerability in SeeBlick 1.0 Beta's upload.php. Attackers can upload arbitrary files via unspecified vectors; uploaded files are stored with .html extensions, which could limit impact to resource consumption and possibly XSS. The NVD entry supp...

CVE-2007-5736

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS...

[SECURITY] Fedora 7 Update: Miro-0.9.8.1-4.fc7

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

CVE-2007-5677

Cross-site scripting XSS vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the goshout parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the goshout parameter...

CVE-2007-5677

CVE-2007-5677 describes a cross-site scripting (XSS) vulnerability in the Hackish BETA 1.1 software, specifically in the shoutbox/blocco.php component. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted value to the go_shout parameter. The vulnerabilit...

CVE-2007-5677

Cross-site scripting XSS vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the goshout parameter...

[Vulz] Seeblick 1.0 Beta File Upload Vulz

Software: SeeBlick 1.0 Beta Found by : Xcross87 Xploit : http://victim.com/path/seeblick-admin/upload.php http://victim.com/path/seeblick/admin/upload.php Demo : cm.bs-24.net/seeblick-admin/upload.php Upload all kind of files , in server will be rename into .html === Xcross87 | HCETeam Xploiter |...

Hackish XSS in shoutbox/blocco.php

Hackish BETA 1.1 XSS Discovered by Matrix86 Vendor: http://hackish.eu POF http://site.com/hackish/shoutbox/blocco.php?goshout=Matrix863C/a3E3C/p3E3C/div3E3Chtml3E3Cscript3Ealertdocument.cookie;3C/script3E3C/html3E...

shoutbox-xss.txt

Hackish BETA 1.1 XSS Discovered by Matrix86 Vendor: http://hackish.eu POF http://site.com/hackish/shoutbox/blocco.php?goshout=Matrix86%3C/a%3E%3C/p%3E%3C/div%3E%3Chtml%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E%3C/html%3E...

CVE-2007-5592

Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the SettingOPTincludepath parameter to 1 adminhelp.php; and 2 admin.incl.php, 3 reg.incl.php, 4 help.incl.php, 5 gbook.incl.php, and 6...

CVE-2007-5592

Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the SettingOPTincludepath parameter to 1 adminhelp.php; and 2 admin.incl.php, 3 reg.incl.php, 4 help.incl.php, 5 gbook.incl.php, and 6...