18 matches found
EUVD-2005-0661
Malware in sbrugna...
EUVD-2003-1396
Malware in sbrugna...
D-Forum 1.11 Nav.PHP3 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12720/info D-Forum is reportedly affected by a cross-site scripting vulnerability. This issue is due to the application failing to properly sanitize user-supplied input. As a result of this vulnerability, it is possible f...
D-Forum 1 header Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/6879/info D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts. Under some...
D-Forum 1 footer Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/6879/info D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts. Under some...
CVE-2003-1406
PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the 1 myheader parameter to header.php3 or 2 myfooter parameter to footer.php3...
CVE-2003-1406
The CVE covers a PHP remote file inclusion in D-Forum 1.00 through 1.11. Vulnerable components are the header.php3 and footer.php3 scripts, exploitable via the my_header or my_footer parameters to inject a URL and execute arbitrary PHP code on the server. This results in potential remote code exe...
CVE-2005-0660
Multiple cross-site scripting XSS vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3...
CVE-2005-0660
Multiple cross-site scripting XSS vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3...
CVE-2005-0660
CVE-2005-0660 affects D-Forum 1.11 with multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via certain fields, demonstrated using the page parameter in nav.php3. NVD notes network attack vector, medium complexity, no authenticati...
D-Forum 1.11 - 'Nav.php3' Cross-Site Scripting
source: https://www.securityfocus.com/bid/12720/info D-Forum is reportedly affected by a cross-site scripting vulnerability. This issue is due to the application failing to properly sanitize user-supplied input. As a result of this vulnerability, it is possible for a remote attacker to create a...
D-Forum 1.11 - Nav.php3 Cross-Site Scripting
D-Forum 1.11 - Nav.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/12720/info D-Forum is reportedly affected by a cross-site scripting vulnerability. This issue is due to the application failing to properly sanitize user-supplied input. As a result of this vulnerability, it is...
[SA14464] D-Forum "page" Parameter Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
CVE-2003-1406
PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the 1 myheader parameter to header.php3 or 2 myfooter parameter to footer.php3...
D-Forum 1 - 'footer' Remote File Inclusion
source: https://www.securityfocus.com/bid/6879/info D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts. Under some circumstances, it is possible for remote...
D-Forum 1 - footer Remote File Inclusion
D-Forum 1 - footer Remote File Inclusion source: https://www.securityfocus.com/bid/6879/info D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts. Under some...
D-Forum 1 - header Remote File Inclusion
D-Forum 1 - header Remote File Inclusion source: https://www.securityfocus.com/bid/6879/info D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts. Under some...
D-Forum (PHP)
Informations : °°°°°°°°°°°°°° Website : http://www.adalis.fr/adalis.html Versions : 1.00 - 1.11 Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° /includes/header.php3 : --------------------------- ?php if $myheader!="" include $myheader; else ? ... --------------------------...