981 matches found
E107 - (v0.7.8) Access Escalation Vulnerbility - PoC
?/ File: mailout.php Affects: E107 v0.7.8 - mailout.php Date: 12th April 2007 Issue Description: =========================================================================== mailout.php provides an interface for the site administrator to send/configure and test email functionality in e107, the...
e107 0.7.8 - 'mailout.php' (Authenticated) Access Escalation
?php //E107 - v0.7.8 Access Escalation Vulnerbility - PoC //Overwrites filetypes.php allowing the upload of dangerous filetypes echo "\n"; echo " Special Greetings To - Timq,Warpboy,The-Maggot \n"; echo "...
CVE-2006-5786
CVE-2006-5786 affects e107 up to version 0.7.5. A directory traversal flaw in class2.php allows remote attackers to read and execute PHP code in arbitrary files by manipulating the e107language_e107cookie cookie sent to gsitemap.php. Impact per sources: partial confidentiality, partial integrity,...
e107 <= 0.75 (e107language_e107cookie) Local File Include Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
e107 0.75 - e107language_e107cookie Local File Inclusion
e107 0.75 - e107languagee107cookie Local File Inclusion DEVIL TEAM IRC: 72.20.18.6:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM...
e107 <= 0.75 (e107language_e107cookie) Local File Include Exploit
Exploit for unknown platform in category web applications ================================================================= e107 = 0.75 e107languagee107cookie Local File Include Exploit ================================================================= ? print ' ::::::::: :::::::::: ::: :::...
e107 < 0.75 - 'e107language_e107cookie' Local File Inclusion
DEVIL TEAM IRC: 72.20.18.6:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon TomZen, Gelo, Ramzes, DMX, Ci2u,...
[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Netquery by "VIRtech" Discovered Date: 04/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.virtech.org Details: VIRtechs Netquery system is prone to a Cross Site Scripting...
Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Netquery by "VIRtech" Discovered Date: 04/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.virtech.org Details: VIRtechs Netquery system is prone to a Cross Site Scripting...
CVE-2006-4794
Multiple cross-site scripting XSS vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string PATHINFO in 1 contact.php, 2 download.php, 3 admin.php, 4 fpw.php, 5 news.php, 6 search.php, 7 signup.php, 8 submitnews.php, and 9 user.php. NOTE: the...
CVE-2006-4794
Multiple cross-site scripting XSS vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string PATHINFO in 1 contact.php, 2 download.php, 3 admin.php, 4 fpw.php, 5 news.php, 6 search.php, 7 signup.php, 8 submitnews.php, and 9 user.php. NOTE: the...
CVE-2006-4794
CVE-2006-4794 describes multiple XSS vulnerabilities in e107 0.7.5 via the PATH_INFO query string in numerous PHP pages (contact.php, download.php, admin.php, etc.). Connected records indicate a broader XSS family affecting e107 0.7.16 and earlier (admin/ and related files such as submitnews.php,...
CVE-2006-4757
Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the 1 linkopentype, 2 linkrender, 3 linkclass, and 4 linkid parameters in a links.php; the 5 searchquery parameter in b users.php; and th...
CVE-2006-4757
Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the 1 linkopentype, 2 linkrender, 3 linkclass, and 4 linkid parameters in a links.php; the 5 searchquery parameter in b users.php; and th...
CVE-2006-4757
CVE-2006-4757 affects the e107 CMS version 0.7.5. The vulnerability is described as multiple SQL injection flaws in the admin section, enabling remote authenticated administrative users to execute arbitrary SQL commands via the following parameters: (1) linkopentype, (2) linkrender, (3) link_clas...
e107 website system 0.7.5 - user.php?Query String (PATH_INFO) Cross-Site Scripting
e107 website system 0.7.5 - user.php?Query String PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issu...
e107 website system 0.7.5 - fpw.php?Query String (PATH_INFO) Cross-Site Scripting
e107 website system 0.7.5 - fpw.php?Query String PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue...
e107 website system 0.7.5 - download.php?Query String (PATH_INFO) Cross-Site Scripting
e107 website system 0.7.5 - download.php?Query String PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this...
e107 website system 0.7.5 - signup.php?Query String (PATH_INFO) Cross-Site Scripting
e107 website system 0.7.5 - signup.php?Query String PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this...
e107 website system 0.7.5 - submitnews.php?PATH_INFO Cross-Site Scripting
e107 website system 0.7.5 - submitnews.php?PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue to ha...