622 matches found
PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting / SQL Injection Code Execution
!/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:...
Php Blue Dragon CMS <= 2.9.1 (XSS/SQL) Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================= Php Blue Dragon CMS = 2.9.1 XSS/SQL Code Execution Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on ? $devilteam = "...
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/18609/info PHP Blue Dragon CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to have an arbitrary remote file containing malicio...
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/18609/info PHP Blue Dragon CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage thes...
PHP Blue Dragon CMS 2.9.1 - template.php File Inclusion
PHP Blue Dragon CMS 2.9.1 - template.php File Inclusion ----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch:...
PHP Blue Dragon CMS 2.9.1 - 'template.php' File Inclusion
----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...
Php Blue Dragon CMS <= 2.9.1 (template.php) File Include Vulnerability
No description provided by source. ----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...
Php Blue Dragon CMS <= 2.9.1 (template.php) File Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Php Blue Dragon CMS = 2.9.1 template.php File Include Vulnerability ======================================================================...
Remote file inclusion
PHP remote file inclusion vulnerability in publicincludes/pubpopup/popupfinduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter...
CVE-2006-2392
CVE-2006-2392 describes a PHP remote file inclusion vulnerability in the public_includes/pub_popup/popup_finduser.php of PHP Blue Dragon Platinum 2.8.0 . The flaw permits remote attackers to execute arbitrary PHP code by supplying an attacker-controlled URL in the vsDragonRootPath parameter. This...
[SA20115] Php Blue Dragon CMS "vsDragonRootPath" File Inclusion
TITLE: Php Blue Dragon CMS "vsDragonRootPath" File Inclusion SECUNIA ADVISORY ID: SA20115 VERIFY ADVISORY: http://secunia.com/advisories/20115/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Php Blue Dragon CMS 2.x http://secunia.com/product/9942/ DESCRIPTION: Kacper...
CVE-2006-2392: Undefined Security Weakness
PHP remote file inclusion vulnerability in publicincludes/pubpopup/popupfinduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter...
PHP Blue Dragon CMS 2.9 - Remote File Inclusion
PHP Blue Dragon CMS 2.9 - Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM Php Blue Dragon Platinum - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : dork: powered by Php Blue Dragon Platinum code // Szukanie u.ytkownika...
PHP Blue Dragon CMS 2.9 - Remote File Inclusion
DEVIL TEAM THE BEST POLISH TEAM Php Blue Dragon Platinum - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : dork: powered by Php Blue Dragon Platinum code // Szukanie u.ytkownika include$vsDragonRootPath."publicincludes/publanguage/".$UserSessi...
Php Blue Dragon CMS <= 2.9 Remote File Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM Php Blue Dragon Platinum - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : dork: powered by Php Blue Dragon Platinum code // Szukanie u.ytkownika...
Php Blue Dragon CMS <= 2.9 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ Php Blue Dragon CMS SessionData"SesUserLanguage"."/modprivmsg.".$phpExt; /code Fix: code // Szukanie u.ytkownika $vsDragonRootPath = "./";...
[SA18499] WB News "name" Script Insertion Vulnerability
TITLE: WB News "name" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18499 VERIFY ADVISORY: http://secunia.com/advisories/18499/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WB News 1.x http://secunia.com/product/6866/ DESCRIPTION: DragoN has...
CVE-2006-0221
SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network DDSN cm3 content manager CM3CMS allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password...
CVE-2006-0221: Undefined Security Weakness
SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network DDSN cm3 content manager CM3CMS allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password...
Enterasys Dragon Enterprise Reporting detection
The remote host is running the Enterasys Dragon Enterprise Reporting on this port. OpenVAS Vulnerability Test $Id: enterasysdragonreportingdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Enterasys Dragon Enterprise Reporting detection Authors: David Maciejak Copyright: Copyright C 200...