domus-materiaux.fr XSS vulnerability

Open Bug Bounty ID: OBB-448843 Description| Value ---|--- Affected Website:| domus-materiaux.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

Security update for xen (important)

This update for xen fixes several issues. These security issues were fixed: - CVE-2017-14316: Missing bound check in function allocheappages for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen XSA-231, bsc1056278 - CVE-2017-14318: The function...

Foro Domus 2.10 Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16154/info Foro Domus is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...

Foro Domus escribir.php email Parameter Cross-Site Scripting - Ver2 (CVE-2006-0110)

A cross-site scripting vulnerability has been reported in Foro Domus. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary script into the affected system...

Debian DSA-2501-1 : xen - several vulnerabilities

Several vulnerabilities were discovered in Xen, a hypervisor. - CVE-2012-0217 Xen does not properly handle uncanonical return addresses on Intel amd64 CPUs, allowing amd64 PV guests to elevate to hypervisor privileges. AMD processors, HVM and i386 guests are not affected. - CVE-2012-0218 Xen does...

Foro Domus Menu.PHP远程文件包含漏洞

Foro Domus是一款基于PHP的WEB应用程序。 Foro Domus不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Menu.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Domus 2.10 目前没有解决方案提供,请关注以下链接： http://sourceforge.net/projects/domus/ C xoron Name: Foro Domus v2.10 Remote File Include Exploit Author: xoron Exploit code...

CVE-2007-0580

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesionidioma parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesionidioma parameter...

CVE-2007-0580

CVE-2007-0580 affects Foro Domus 2.10: PHP remote file inclusion in menu.php via the sesion_idioma parameter allows remote code execution. Root cause is including remote PHP files through a crafted URL. Public references indicate exploits exist (e.g., Exploit-DB), but remediation details are not ...

Foro Domus 2.10 (phpbb_root_path) Remote File Include Exploit

No description provided by source. C xoron Name: Foro Domus v2.10 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=8920 xoron.biz Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjorn Tesekkurler: chaos, pang0...

Foro Domus 2.10 (phpbb_root_path) Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================= Foro Domus 2.10 phpbbrootpath Remote File Include Exploit ============================================================= C xoron Name: Foro Domus v2.10 phpbbrootpath Remote File...

Foro Domus 2.10 - 'phpbb_root_path' Remote File Inclusion

C xoron Name: Foro Domus v2.10 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=8920 xoron.biz Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjorn Tesekkurler: chaos, pang0 $rfi = "menu.php?sesionidioma=";...

CVE-2006-0159

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...

Sql injection

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...

CVE-2006-0159

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...

CVE-2006-0159

CVE-2006-0159 is a SQL injection vulnerability in Foro Domus 2.10, specifically in escribir.php via the email parameter. According to the connected NVD entry, remote attackers can execute arbitrary SQL commands (AV:N/AC:L/Au:N/C:P/I:P/A:P). The affected component is Foro Domus 2.10, escribi r.php...

EV0016.txt

New eVuln Advisory: Proyecto Domus 'email' XSS Vulnerability --------------------Summary---------------- Software: Proyecto Domus Sowtware's Web Site: http://domus.sourceforge.net/ Versions: 2.10 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched Exploit: Availabl...

Cross site scripting

Cross-site scripting XSS vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter...

CVE-2006-0110

Cross-site scripting XSS vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter...

[eVuln] Proyecto Domus 'email' XSS Vulnerability

New eVuln Advisory: Proyecto Domus 'email' XSS Vulnerability --------------------Summary---------------- Software: Proyecto Domus Sowtware's Web Site: http://domus.sourceforge.net/ Versions: 2.10 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched Exploit: Availabl...