CVE-2008-1123: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the CarpPath parameter to 1 files/carprss.php and 2 files/amazon-bestsellers.php...

RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow

RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow source: https://www.securityfocus.com/bid/27742/info RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently...

RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27742/info RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may exploit this issue to execute...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

CVE-2007-3975

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

CVE-2007-3975

CVE-2007-3975 is a Cross-site Scripting (XSS) vulnerability in Elite Forum 1.0.0.0, exploitable via the title parameter in a ptopic action on index.php. The public text in the connected documents confirms the vulnerability existence but does not provide concrete technical details beyond the param...

CVE-2007-3975: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

Code injection

PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...

CVE-2007-3592

PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...

CVE-2007-3591

The CVE-2007-3591 issue affects Elite Bulletin Board, prior to version 1.0.10, in the Profile.php handling. The root cause is described as missing authorization checks on a remote form, enabling remote modification of profile information via unspecified vectors. Impact is limited to unauthorized ...

CVE-2007-3591

Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks...

CVE-2007-3592

PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...

CVE-2007-3592

Vulnerability CVE-2007-3592 affects Elite Bulletin Board (earlier than 1.0.10). The PM.php module allows remote authenticated users to delete arbitrary private messages and other attacks by modifying id fields, indicating improper input validation of message identifiers. The issue enables manipul...

CVE-2007-3591: Undefined Security Weakness

Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks...

CVE-2007-3592: Undefined Security Weakness

PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...

Unfixed XSS vulnerability at www.elite-it.com

Security researcher MaXWeL, has submitted on 03/06/2007 a cross-site-scripting XSS vulnerability affecting www.elite-it.com, which at the time of submission ranked 1050762 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/06/2007. It is...

Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities

No description provided by source. ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...

magicnewspro.txt

==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.reamdaysoft.com...

MagicNews-1.0.3.txt

==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.reamdaysoft.com...

Lift the download limit, take a dip cafe-vulnerability warning-the black bar safety net

Cafes bring their own music quite cheesy, without a hint of sporty new, As“New Age”of Internet users, you can willingly take? In this case you sure want to download from the Internet songs, but currently most of the Internet cafes, the function is disabled, the only way is to hack it blockade, so...