168 matches found
JaxUltraBB 2.0 - delete.php Remote Auto Deface
JaxUltraBB 2.0 - delete.php Remote Auto Deface !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+:...
JaxUltraBB <= 2.0 (delete.php) Remote Auto Deface Exploit
Exploit for unknown platform in category web applications ========================================================= JaxUltraBB = 2.0 delete.php Remote Auto Deface Exploit ========================================================= !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: :...
CVE-2006-4747
Multiple cross-site scripting XSS vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter in delete.php and 2 the error parameter in error.php...
TextAds - delete.php?id Cross-Site Scripting
TextAds - delete.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/19932/info TextAds is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
free QBoard 1.1 - delete.php?qb_path Remote File Inclusion
free QBoard 1.1 - delete.php?qbpath Remote File Inclusion source: https://www.securityfocus.com/bid/18780/info Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows the attacker to...
Sql injection
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 functions.php and 2 user.php in the libs directory, 3 edit.php and 4 delete.php in control/files/, 5 edit.php and 6 delete.php in control/users/, 7 edit.php,...
CVE-2005-2168
delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter...
PT-2005-3100 · Plague · Plague News System
Name of the Vulnerable Software and Affected Versions: Plague News System versions 0.6 and earlier Description: The issue allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter in the delete.php file. Recommendations: For Plague News...