CVE-2010-2050

The CVE-2010-2050 entry describes a directory traversal / Local File Inclusion in the Joomla! component MS Comment (com_mscomment) 0.8.0b by Moron Solutions. An attacker can exploit a flaw in the index.php controller parameter (.. traversal) to read arbitrary files on the server. The issue is cla...

CVE-2010-2050: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Moron Solutions MS Comment commscomment component 0.8.0b for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Joomla! Component MS Comment 0.8.0b - Local File Inclusion

Joomla! Component MS Comment 0.8.0b - Local File Inclusion !===========================================================================! Joomla Component MS Comment LFI Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://Xr0b0t.name |...

Joomla! Component MS Comment 0.8.0b - Local File Inclusion

!===========================================================================! Joomla Component MS Comment LFI Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://Xr0b0t.name | http://Malangcyber.com Date : 16 Mei, 2010...

CVE-2010-1602

Directory traversal vulnerability in the ZiMB Comment comzimbcomment component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the ZiMB Comment comzimbcomment component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the JA Comment comjacomment component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php...

CVE-2010-1601

CVE-2010-1601 refers to a directory traversal (local file inclusion) in the Joomla! JA Comment (com_jacomment) component. The vulnerability exists when an attacker supplies a …/ (dot dot) sequence in the view parameter to index.php, enabling reading of arbitrary files on the affected server. The ...

CVE-2010-1602

CVE-2010-1602 affects Joomla! ZiMB Comment component 0.8.1 (com_zimbcomment). The vulnerability is a Local File Inclusion via a directory traversal (.. in the controller parameter to index.php), allowing an attacker to read arbitrary files and potentially impact other areas. The Nuclei template c...

CVE-2010-1602

Directory traversal vulnerability in the ZiMB Comment comzimbcomment component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1602: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the ZiMB Comment comzimbcomment component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1601: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JA Comment comjacomment component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php...

Advanced Poll Script SQL Injection / Cross Site Scripting

Exploit Title: XSS and Authentication bypass in Advanced Poll Script Date: 26-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with...

Cross site scripting

Cross-site scripting XSS vulnerability in the Workflow module 5.x-2.x before 5.x-2.6 and 6.x-1.x before 6.x-1.4 for Drupal, when used with the Token module, might allow remote authenticated users to inject arbitrary web script or HTML via a certain Comment field...

CVE-2010-1539

Cross-site scripting XSS vulnerability in the Workflow module 5.x-2.x before 5.x-2.6 and 6.x-1.x before 6.x-1.4 for Drupal, when used with the Token module, might allow remote authenticated users to inject arbitrary web script or HTML via a certain Comment field...

CVE-2010-1539: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Workflow module 5.x-2.x before 5.x-2.6 and 6.x-1.x before 6.x-1.4 for Drupal, when used with the Token module, might allow remote authenticated users to inject arbitrary web script or HTML via a certain Comment field...

wb news (webmobo) 2.3.3 - Persistent Cross-Site Scripting

wb news webmobo 2.3.3 - Persistent Cross-Site Scripting Title: WB News Webmobo 2.3.3 Stored XSS Vendor: http://www.webmobo.org/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

Joomla ZiMB Comment 0.8.1 Local File Inclusion

================================================================================================================= o Joomla Component ZiMB Comment Local File Inclusion Vulnerability Software : comzimbcomment version 0.8.1 Vendor : http://www.zimbllc.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY...

Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion

Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion ================================================================================================================= o Joomla Component ZiMB Comment Local File Inclusion Vulnerability Software : comzimbcomment version 0.8.1 Vendor :...

Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion

================================================================================================================= o Joomla Component ZiMB Comment Local File Inclusion Vulnerability Software : comzimbcomment version 0.8.1 Vendor : http://www.zimbllc.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY...