CVE-2007-5692

Multiple cross-site scripting XSS vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter to integrator.php; 2 the token parameter in a New Password action, 3 the nidacl parameter in a Folder Properties action, or 4 the uid parameter...

CVE-2007-5695

CVE-2007-5695 is a real issue in SiteBar 3.3.x where an error in command.php allows remote attackers to redirect users to arbitrary websites via the forward parameter in a Log In action. Public sources (Debian, Gentoo GLSA, and OpenVAS) corroborate a family of related sitebar vulnerabilities, wit...

CVE-2007-5695

Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbitrary web sites via a URL in the forward parameter in a Log In action...

SiteBar 3.3.8 - command.php?Modify User Action uid Cross-Site Scripting

SiteBar 3.3.8 - command.php?Modify User Action uid Cross-Site Scripting source: https://www.securityfocus.com/bid/26126/info SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include: - A local file-include...

Digital WebShop 1.128 - Multiple Remote File Inclusions

Title : Digital WebShop = v1.128 Multiple Remote File Include Vulnerabilities Author : ajann Script Page : http://digitalwebshop.dyndns.org Exploit; Files rechnung.php prepend.php /Files Code,1 prepend.php Error: // include Werzeuge .. .... requireonce$PHPLIB"libdir" . "phpDB-mysql.lib"; / Mysql...

BCWB 0.99 - 'ROOT_PATH' Remote File Inclusion

Title : Bcwb 0.99rootpathRemote File Include Vulnerability Author : ajann Greetz : shadow and Suskun for host : Exploit; File startup.inc.php /File Code,1 startup.inc.php Error: .. .... // Debug services include$rootpath.'include/startup/debug.inc.php';...

CVE-2006-3320

Cross-site scripting XSS vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter...

CVE-2006-3320

Cross-site scripting XSS vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter...