Crea-Book 1.0 - Admin Access Bypass / Database Disclosure / Code Execution

/=======================================\ | Advisory :: Crea-Book fr/en | | Date : 2007-04-10 | | Last update : 2007-04-10 | | | +-------------------------------------------------------------------------------------------------------+ | Summary : 0 Description | | 1 Vuln1 : Administrative Access...

HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution

+========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution

HIOX GUEST BOOK HGB 4.0 - Remote Code Execution +========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

Crea-Book 1.0 - Admin Access Bypass Database Disclosure Code Execution

Crea-Book 1.0 - Admin Access Bypass Database Disclosure Code Execution /=======================================\ | Advisory :: Crea-Book fr/en | | Date : 2007-04-10 | | Last update : 2007-04-10 | | |...

HIOX GUEST BOOK (HGB) 4.0 Remote Code Execution Vulnerability

No description provided by source. +========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

Scorp Book 1.0 (smilies.php config) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Scorp Book 1.0 smilies.php config Remote File Inclusion Vulnerability ======================================================================= !/usr/bin/perl .-""""""""...

MAMBO & Joomla NFN Address Book v0.4 (nfnaddressbook.php) Remote File Include Vulnerabilities

MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts...

NFN Address Book mosConfig_Absolute_Path远程文件包含漏洞

NFN Address Book是一款基于PHP的WEB应用程序。 NFN Address Book不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'nfnaddressbook.php'脚本对用户提交的mosConfigAbsolutePath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mambo NFN Address Book 0.4 Joomla NFN Address Book 0.4 目前没有解决方案提供： http://mamboxchange.com/projects/nfnaddressbook...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

CVE-2007-1596

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

CVE-2007-1596

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

CVE-2007-1596

CVE-2007-1596 affects NFN Address Book (com_nfn_addressbook) v0.4 for Mambo/Joomla. The vulnerability is a PHP remote file inclusion via a URL supplied to mosConfig_absolute_path in either components/com_nfn_addressbook/nfnaddressbook.php or administrator/components/com_nfn_addressbook/nfnaddress...

CVE-2007-1596: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts...

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be...

Unfixed XSS vulnerability at book.26cc.com

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting book.26cc.com, which at the time of submission ranked 533111 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

Unfixed XSS vulnerability at book.26cc.com

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting book.26cc.com, which at the time of submission ranked 533111 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

WEBO (Web ORGanizer) 1.0 - 'baseDir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV67$2007 ----------------------------------------------------------------------------------------- ECHOADV67$2007 WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vulnerability...

WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================ WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vuln ================================================================ \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ /...

Sql injection

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php. NOTE: some of these details are obtained...