Telekorn Signkorn Guestbook 1.x - helpenadminhelp2.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - helpenadminhelp2.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may all...

Telekorn Signkorn Guestbook 1.x - adminpreview.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - adminpreview.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow t...

Telekorn Signkorn Guestbook 1.x - helpdeadminhelp1.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - helpdeadminhelp1.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may all...

Telekorn Signkorn Guestbook 1.x - includesfunctions.gb.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - includesfunctions.gb.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may...

Vikingboard 0.1b - report.php Cross-Site Scripting

Vikingboard 0.1b - report.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19916/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

Vikingboard 0.1 - topic.php SQL Injection

Vikingboard 0.1 - topic.php SQL Injection source: https://www.securityfocus.com/bid/19919/info Viking board is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. This may allow an attacker to compromise the application, access or modify data, or...

OZJournal15.txt

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

sc09.txt

Shopping Cart V0.9 Homepage: http://glendown.de/shop/ Affected files: index.php editshop.php edititem.php ----------------------------------------- XSS vuln on editshop.php & edititem.php: Data isn't sanatized before being entered. For a PoC as a shop name or item enter in: alert'xss' The shop...

Sport-slo.net Guestbook v1.0

Advanced Guestbook v1.0 Homepage: http://www.sport-slo.net/ Affected files: guestbook.php ----------------------------------------------- XSS vuln on guestbook.php: Data isn't sanatized before being submit to guestbook.txt and displayed onscreen. The code: if$POST'action' if$POST'name' &&...

TigerTom Scripts

TigerTom Scripts Homepage: http://www.ttfreeware.co.uk/ Affected files: TTCalc script v1.0 --------------------------- Data pased in the "Length of loan, years" and "Length of mortgage, years" input boxes are not sanatized before being generated. For a PoC in the input boxes listed above simply...

Shopping Cart V0.9

Shopping Cart V0.9 Homepage: http://glendown.de/shop/ Affected files: index.php editshop.php edititem.php ----------------------------------------- XSS vuln on editshop.php & edititem.php: Data isn't sanatized before being entered. For a PoC as a shop name or item enter in: scriptalert'xss'/scrip...

Buddy Zone Version 1.0.1 - XSS

Buddy Zone Version 1.0.1 Homepage: http://www.vastal.com/buddy-zone-social-networking-script.html Affected files: Sending invitations Profiles Blogs Journals Posting comments Posting in the forum Sending mail Creating a group viewsubforum.php viewpost.php viewclassifieds.php viewad.php...

ezWaiter v3.0 - XSS

ezWaiter v3.0 Homepage: http://www.ezwaiter.com/ Affected files: Placing an order login.php ------------------------------------------- XSS vuln when placing an order: User input is not sanatized before being generated. For a PoC in the two boxes labeled "Who is this item for?" and "Special...

dragons.txt

Dragons Kingdom Script v1.0 Homepage: http://www.dkscript.com/ Affected files: Sending mail: - Sending in-game mail Character Profiles: - All input boxes of the profile Posting & Replying in the forum: - Posting in the forum - Replying in the forum Form spoofing can occur in: - Profile input boxe...

b3ta.txt

B3ta.com Homepage: http://www.b3ta.com Affected files: Input boxes of your profile XSS vuln with cookie disclosure via Profile: box. Data isn't correctly sanatized before being generated. We can bypass the filters of the site one way by using img tags and converting our javascript to UTF-8 unicod...

Dating biz@ dating script v1.0 - XSS

Custom dating biz@ dating script v1.0 Homepage: http://www.e-cbd.biz/phpdatingscript.html Affected files: Profiles userview.php photocreate.php --------------------------------- The edit profile form can be spoofed and a user can enter any data he wishes and it will update his profile. The "Choos...

Somechess v1.5 rc1 - XSS

Somechess v1.5 rc1 Homepage: http://www.astrodogpress.org/chess/ Affected files: Profile input boxes ----------------------- Upon dumping the sql data into the table if you get errors and it wont create the tables & data like it did to me, then just remove all the " from the sql file. You'll also...

mambo453.txt

GulfTech Security Research February 24, 2006 Vendor : Miro International Pty Ltd URL : http://www.mamboserver.com/ Version : Mambo = 4.5.3h Risk : Multiple Vulnerabilities Description: Mambo is a popular Open Source Content Management System released under the GNU General Public license GNU GPL...

PhpGroupWare XSS

The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Community Link Pro - 'login.cgi?File' Remote Command Execution

source: https://www.securityfocus.com/bid/14097/info Community Link Pro is prone to a remote arbitrary command execution vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. Due to this, an attacker can prefix arbitrary commands with the '|' character...