89 matches found
TorrentTrader Classic Mutiple Remote vulnerabilities
Hello,, TorrentTrader Classic Mutiple Remote vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on TorrentTrader Classic v1.07 local file inclusion backend/admin-functions.php?ssuri=dd Xss...
vBulletin vCard PRO XSS
vBulletin vCard PRO XSS http://www.albatoul.net/vcard/gbrowse.php?catid=9&sortby=XSS...
phpArcadeScript 2.0 browse.php Multiple Parameter XSS
phpArcadeScript 2.0 browse.php Multiple Parameter XSS. CVE-2006-1082. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of...
CVE-2005-2698
CVE-2005-2698 describes a cross-site scripting (XSS) vulnerability in Nephp Publisher Enterprise 3.04, affecting the file/browse.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a hex-encoded value for the keywords parameter. The vulnerability could impac...
CVE-2005-2436
browse.php in Website Baker Project allows remote attackers to obtain sensitive data via 1 a directory that does not exist in the dir parameter or 2 a direct request to certain php files, which reveal the path in an error message...
CVE-2005-2436
CVE-2005-2436 affects Website Baker Project. Affected functionality: browse.php allows remote disclosure of sensitive data. Root cause: error messages reveal the filesystem path when accessing (1) a non-existent dir parameter value or (2) direct requests to certain PHP files. Impact: partial conf...
CVE-2005-2380
PHP Surveyor 0.98 is affected by multiple cross-site scripting vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via parameters to browse.php (sid, start, id) or to dataentry.php/export.php (sid). OpenVAS notes additional vulnerabilities (SQL injection and path di...
CVE-2005-0265
The CVE concerns OWL, specifically browsers.php in OWL 0.7 and 0.8, where multiple SQL injection flaws exist in the browse.php handler. The vulnerabilities allow remote attackers to submit crafted values via the (1) parent or (2) sortposted parameters, potentially causing arbitrary SQL execution ...
CVE-2002-0958
Technical details about CVE-2002-0958 are not publicly provided in the connected documents. No additional information on affected products, versions, root cause, exploit status, or fixes is available here. Monitor for updates from official sources.