TorrentTrader Classic Mutiple Remote vulnerabilities

Hello,, TorrentTrader Classic Mutiple Remote vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on TorrentTrader Classic v1.07 local file inclusion backend/admin-functions.php?ssuri=dd Xss...

vBulletin vCard PRO XSS

vBulletin vCard PRO XSS http://www.albatoul.net/vcard/gbrowse.php?catid=9&sortby=XSS...

CVE-2006-3152: Undefined Security Weakness

Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 sectio parameter in a login.php, b writenewad.php, c newad.php, d printad.php, e askseller.php, f browse.php, g showmemberads.php, h notead.php, i abuse.php, ...

CVE-2006-1560: Undefined Security Weakness

Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly 1 id and 2 topicid, in a browse.php, b category.php, c gallery.php, d poll.php, and e possibly other unspecified scripts. NOTE:...

CVE-2006-1082: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the gamename parameter in tellafriend.php, 2 the loginstatus parameter in loginbox.php, 3 the submissionstatus parameter in index.php, the 4...

phpArcadeScript 2.0 browse.php Multiple Parameter XSS

phpArcadeScript 2.0 browse.php Multiple Parameter XSS. CVE-2006-1082. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of...

CVE-2005-4586: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the 1 sql parameter in browse.php and the 2 sid, 3 lid, 4 gid, and 5 token parameters in certain PHP scripts...

CVE-2005-2698

CVE-2005-2698 describes a cross-site scripting (XSS) vulnerability in Nephp Publisher Enterprise 3.04, affecting the file/browse.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a hex-encoded value for the keywords parameter. The vulnerability could impac...

CVE-2005-2698: Undefined Security Weakness

Cross-site scripting XSS vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter...

CVE-2005-2436

browse.php in Website Baker Project allows remote attackers to obtain sensitive data via 1 a directory that does not exist in the dir parameter or 2 a direct request to certain php files, which reveal the path in an error message...

CVE-2005-2436

CVE-2005-2436 affects Website Baker Project. Affected functionality: browse.php allows remote disclosure of sensitive data. Root cause: error messages reveal the filesystem path when accessing (1) a non-existent dir parameter value or (2) direct requests to certain PHP files. Impact: partial conf...

CVE-2005-2436: Undefined Security Weakness

browse.php in Website Baker Project allows remote attackers to obtain sensitive data via 1 a directory that does not exist in the dir parameter or 2 a direct request to certain php files, which reveal the path in an error message...

CVE-2005-2435: Undefined Security Weakness

Cross-site scripting XSS vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2005-2399: Undefined Security Weakness

PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to 1 browse.php, 2 export.php, 3 conditions.php, or 4 spss.php...

CVE-2005-2398: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands via 1 the sid, start, and id parameters to browse.php, the sid parameter to 2 dataentry.php, 3 export.php, 4 admin.php, 5 conditions.php, 6 spss.php, 7 deletesurvey.php, 8...

CVE-2005-2380

PHP Surveyor 0.98 is affected by multiple cross-site scripting vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via parameters to browse.php (sid, start, id) or to dataentry.php/export.php (sid). OpenVAS notes additional vulnerabilities (SQL injection and path di...

CVE-2005-2380: Undefined Security Weakness

Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the 1 sid, 2 start, and 3 id parameters to browse.php, or the sid parameter to 4 dataentry.php or 5 export.php...

CVE-2005-2044: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the 1 showcourse parameter to browse.php, 2 subject parameter to contact.php, 3 cid parameter to content.php, 4 l parameter to inbox/sendmessage.php, th...

CVE-2004-2085: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including 1 the sid parameter to comments.php, 2 the cid, cf, or rfd parameters to category.php, or the cid paramet...

CVE-2005-0265

The CVE concerns OWL, specifically browsers.php in OWL 0.7 and 0.8, where multiple SQL injection flaws exist in the browse.php handler. The vulnerabilities allow remote attackers to submit crafted values via the (1) parent or (2) sortposted parameters, potentially causing arbitrary SQL execution ...