463 matches found
nitrotech-rfisql.txt
Name: Nitrotech 0.0.3a Multiple Remote Vulnerabilities Download: http://sourceforge.net/project/downloading.php?groupname=nitrotech&filename=nitrotech003a.zip&usemirror=garr Author: Osirys, thanks to x0r Contact: [email protected] Nitrotech cms is vulnerable to multiple vulnerabilities, like remote...
CVE-2007-5566
Multiple PHP remote file inclusion vulnerabilities in PHPBlog 0.1 Alpha allow remote attackers to execute arbitrary PHP code via a URL in the bloglocalpath parameter to 1 includes/functions.php or 2 includes/email.php. NOTE: this issue is disputed by CVE because the identified code is in function...
LS simple guestbook (v1) Remote Code Execution Vulnerability
No description provided by source. Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input...
MapLab MS4W 2.2.1 - Remote File Inclusion
Bug Found By ka0x D.O.M TEAM we are: anonyph;arp;ka0x;xarnuz Contact: [email protected] FROM SPAIN --- Script: MapLab Version: 2.2.1 Official Site: http://www.maptools.org Download: http://www.maptools.org/dl/ms4w/maplabms4w-2.2.1.zip -- Bug File: params.php Path: /htdocs/gmapfactory/params.php Bu...
CVE-2007-1636
CVE-2007-1636 affects RoseOnlineCMS 3 B1 and is described as a directory traversal vulnerability in index.php. The vulnerability allows remote attackers to include arbitrary files by using a .. sequence in the op parameter, with demonstrated impact involving injection of PHP code into Apache log ...
Messagerie Locale - 'centre.php' Remote File Inclusion
=================================================================================== Messagerie Locale = centre.php $page Remote File Inclusion Exploit =================================================================================== Softname : Messagerie Locale Url :...
minibb2-rfi.txt
Title : MiniBB Forum = 2 Remote File Include index.php Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.minibb.net/download.php?file=minibb20 ----- Affected software description : Application : MiniBB For...
Comdev Links Directory 3.1 :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + Comdev Links Directory 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev CSV Importer 3.1 + Venedor ...........: http://www.comdevweb.com +...
phpAutoMembersArea <= 3.2.5 (installed_config_file) Remote Inclusion
Exploit for unknown platform in category web applications ==================================================================== phpAutoMembersArea = 3.2.5 installedconfigfile Remote Inclusion ====================================================================...
phorum5114local.txt
Some vulnerabilities have been discovered in Phorum, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and potentially compromise a vulnerable system. 1 Input passed to the "template" parameter in pm.php isn't properly verified,...
plumeCMS113.txt
The original article can be found at: http://www.hamid.ir/security/ http://www.IHSteam.com Vulnerable Systems: Plume CMS 1.1.3 Vulnerable Code : path/plume-1.1.3/plume/manager/tools/link/dbinstall.php //Vulnerable Code :line 39 requireonce $PXconfig'managerpath'.'/inc/class.checklist.php';...
CVE-2006-3028
PHP remote file inclusion vulnerability in statmodules/usersage/module.php in Minerva 2.0.8a Build 237 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
fr-dyn0.txt
FriendsReunited.co.uk - XSS hole -------------------------------- Desc: Theres' a XSS hole in FriendsReunited Risk: Medium to High can be used to include malicious code Discovered by : dyn0 codeslaghatgmail.com http://0xdeadface.co.uk Site blurb : So FriendsReunited is one of those places where...
CVE-2005-3079
PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection...
CVE-2005-3079
PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection...
CVE-2005-3079
PunBB before 1.2.8 is affected by a file-inclusion vulnerability triggered via the user language selection, allowing an attacker with an account to cause PHP code execution or read local files. The Nessus plugin details a broader set of flaws, including a similar file-inclusion path that can exec...
CVE-2005-3079: Undefined Security Weakness
PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection...
[SA16908] PunBB Two Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
