CVE-2025-28073

CVE-2025-28073 Suggested description phpList 3.6.3 is vulnerable to Reflected Cross-Site Scripting XSS via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized. Vulnerability Type Cross Site Scripting XSS Vend...

EUVD-2007-0352

Malware in sbrugna...

EUVD-2008-0818

Malware in sbrugna...

CVE-2025-28073: Improper Neutralization of Input During Web Page Generation

phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting XSS via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized...

CVE-2011-2195

A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php script and pass a well formed 'path' argument to execute arbitrary commands against the underlying operating system...

CVE-2011-2195: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php script and pass a well formed 'path' argument to execute arbitrary commands against the underlying operating system...

websvn 操作系统命令注入漏洞

websvn is a software application. An online Subversion repository viewer. An operating system command injection vulnerability exists in WebSVN. The vulnerability stems from a flaw found in WebSVN 2.3.2. Without prior authentication, if the "allowDownload" option is enabled in config.php, an...

zzcms Product version \dl\dl.php the parameter b SQL injection

No description provided by source...

WebSVN 2.3.2 - Unproper Metacharacters Escaping exec() Remote Command Injection

WebSVN 2.3.2 - Unproper Metacharacters Escaping exec Remote Command Injection WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction:...

Sql injection

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via 1 the kid parameter to a mod/dl.php or b mod/links.php, and 2 the query parameter to search.php...

CVE-2008-0811: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via 1 the kid parameter to a mod/dl.php or b mod/links.php, and 2 the query parameter to search.php...

auracms162-sql.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/ ------------------------------------ Audit Oleh : NTOS-Team Loka...

AuraCMS 1.62 - Multiple SQL Injections

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/ ------------------------------------ Audit Oleh : NTOS-Team Loka...

CVE-2007-5782: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

FireConfig 0.5 (dl.php file) Remote File Disclosure Vulnerability

No description provided by source. FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 sebug.net...

fireconfig-lfi.txt

FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00...

FireConfig 0.5 (dl.php file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= FireConfig 0.5 dl.php file Remote File Disclosure Vulnerability ================================================================= FireConfig v0.5 dl.php file Remote File...

FireConfig 0.5 - dl.php Remote File Disclosure

FireConfig 0.5 - dl.php Remote File Disclosure FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 milw0rm.com 2007-10-28...

FireConfig 0.5 - 'dl.php' Remote File Disclosure

FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 milw0rm.com 2007-10-28...

Sql injection

Multiple SQL injection vulnerabilities in a index.php and b dl.php in SmE FileMailer 1.21 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ps, 2 us, 3 f, or 4 code parameter. NOTE: the us vector in index.php is already covered by CVE-2007-0346...