5278 matches found
Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access
Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22667/info Pyrophobia is prone to multiple input-validation vulnerabilities, including multiple local file-include issues and multiple cross-site scripting issues. An attacker can exploit these issues t...
Plantilla PHP Simple
Plantilla PHP Simple local file include vulnerability: /zadminxx/listmainpages.php?nfolder=/etc/ file upoad vulnerability: upload any-script with a double extension .. laurent gaffie...
Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22667/info Pyrophobia is prone to multiple input-validation vulnerabilities, including multiple local file-include issues and multiple cross-site scripting issues. An attacker can exploit these issues to steal cookie-based authentication credentials, view...
LoveCMS 1.4 - 'load' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker can exploit these issues to steal...
LoveCMS 1.4 - 'id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker can exploit these issues to steal...
LoveCMS 1.4 - 'step' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker can exploit these issues to steal...
DBGuestbook 1.1 (dbs_base_path) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== DBGuestbook 1.1 dbsbasepath Remote File Include Vulnerabilities =================================================================== DBGuestBook 1.1 Found by Denven ERROR:...
Magic News Plus 1.0.2 - news.php?link_parameters Cross-Site Scripting
Magic News Plus 1.0.2 - news.php?linkparameters Cross-Site Scripting source: https://www.securityfocus.com/bid/22661/info Magic News Pro is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These issues include a remote...
phpXmms 1.0 (tcmdp) Remote File Include Vulnerabilities
------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: phpXmms 1.0 Script Download: ftp://ftp.warpedsystems.sk.ca/pub/php/phpxmms-1.0.tar.gz Contact: ilker Kandemir ilkerkandemiratmynet.com Code:...
CVE-2007-1042: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in news.php in Xpression News X-News 1.0.1, when magicquotesgpc is disabled, allows remote attackers to include arbitrary files or obtain sensitive information via a .. dot dot in the xnews-template parameter. NOTE: the provenance of this information is unknown;...
Magic News Plus 1.0.2 - 'news.php?&link_parameters' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22661/info Magic News Pro is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These issues include a remote file-include issue and two cross-site scripting vulnerabilities. An...
Magic News Plus 1.0.2 - 'n_layouts.php?link_parameters' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22661/info Magic News Pro is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These issues include a remote file-include issue and two cross-site scripting vulnerabilities. An...
CVE-2007-1040: Undefined Security Weakness
Directory traversal vulnerability in archives.php in Xpression News X-News 1.0.1 allows remote attackers to include arbitrary files or obtain sensitive information via a .. dot dot in the xnews-template parameter...
Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Ultimate Fun Book 1.02 function.php Remote File Include Vulnerability ======================================================================= Ultimate Fun Book 1.02...
VS-Link-Partner <= 2.1 (script_pfad) Remote File Include Exploit
No description provided by source. VS-Link-Partner //'=============================================================================================== //'Script Name: VS-Link-Partner //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic...
S-Gastebuch <= 1.5.3 (gb_pfad) Remote File Include Exploit
No description provided by source. S-G鋝tebuch //'=============================================================================================== //'Script Name: S-G鋝tebuch //'Dork Ex. : http://www.google.com.tr/search?q=VS-G%C3%A4stebuch+V.+%C2%A9&hl=tr&start=10&sa=N //'S.Page :...
S-Gastebuch <= 1.5.3 (gb_pfad) Remote File Include Exploit
Exploit for unknown platform in category web applications ========================================================== S-Gastebuch S-Gastebuch //'=============================================================================================== //'Script Name: S-Gastebuch //'.... //'...
PBLang 4.60 <= (index.php) Remote File Include Vulnerability
+++++++++++++++++++++++++++++++++++++++++++++++++++++++ PBLang 4.60 = index.php Remote File Include Vulnerability Script: PBLang Version: 4.60 URL: http://downloads.sourceforge.net/pblang/PBL465nographics.zip?modtime=1098268125&bigmirror=0 Found By: BorN To K!LL...
S-Gastebuch <= 1.5.3 (gb_pfad) Remote File Include Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleS-Gästebuch = V.1.5.3 gbpfad Remote File Include Exploit/title script language="JavaScript"...
VS-News-System <= 1.2.1 (newsordner) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================ VS-News-System VS-News-System //'=============================================================================================== //'Script Name: VS-News-System //'.... //'...