998 matches found
CVE-2007-0785
PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter...
CVE-2007-0785
The CVE-2007-0785 issue affects Flipsource Flip 2.01-final 1.0 and earlier, where a PHP remote file inclusion in previewtheme.php via the inc_path parameter enables arbitrary PHP code execution. The root cause is a vulnerable inclusion path that accepts attacker-controlled URLs. In public disclos...
XMB 1.9.6 Final - 'basename()' Remote Command Execution
!/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works regardless of php.ini settings /...
ScozNews Final-Php <=1.1 Remote File Inclusion Vulnerability
ScozNews Final-Php =1.1 Remote File Inclusion Vulnerability ------------------------------------------ Discoverd By: XORON ------------------------------------------ cont@ct: x0r0nathotmaildotcom ------------------------------------------ script site: www.scoznet.com...
PT-2006-4419 · Invision · Invision Power Board
Name of the Vulnerable Software and Affected Versions: Invision Power Board version 1.3 Final Description: The issue concerns SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands. This is allegedly possible via the CODE parameter in certain actions in...
WD-MKP.txt
!/usr/bin/perl -w MKPortal 1.0.1 Final index.php File Include Vulnerability Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - BlackWHITE - r3v3ng4ns - Net^ViruS Details ======= Note : MKPortal 1.0.1 Final index.php File Include Vulnerability .$ind =...
BitchX 1.1-final - do_hook() Remote Denial of Service
BitchX 1.1-final - dohook Remote Denial of Service // BitchX epic =netcommcomar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 "%s %s" at hook.c:865 // 1 0x080d013b in numberedcommand from=0xbfbfe031 'A' , // comm=-9999999, ArgList=0xbfbfd788 at numbers.c:1413 // 2 0x080d7d02 in...
Remote file inclusion
PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter...
[MajorSecurity] phpMyAgenda 3.0 Final - Remote File Include Vulnerability
MajorSecurity phpMyAgenda 3.0 Final - Remote File Include Vulnerability -------------------------------------------------------- Software: phpMyAgenda Version: 3.0 Final Type: Remote File Include Vulnerability Date: April, 24th 2006 Vendor: phpMyAgenda Page: http://phpmyagenda.com Risc: High...
CVE-2004-1827
CVE-2004-1827 is an XSS vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final. The issue allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags. Affected software is YaBBForum components mentioned in the CVE record, with the vul...
CVE-2004-1827
Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...
CVE-2005-0477
The CVE-2005-0477 entry describes a Cross-site scripting (XSS) vulnerability in the SML code of Invision Power Board 1.3.1 FINAL. The issue can be triggered by crafted content in (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:u...
CVE-2004-0322
Affected software: XMB 1.8 Final SP2. Vulnerability type: multiple cross-site scripting (XSS). Root cause / vectors: manipulation of input parameters and HTML attributes that allow script execution, including (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user paramete...
Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity
Software: Invision Power Board Vendor: http://www.invisionboard.com/ Versions: U v1.3 Final Bug: Cross Site Scripting Vulnerabillity Risk: Medium Exploitation: Remote with browser Date: 29 Feb 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Web: http://theinsider.deep-ice.com 1...
CVE-2004-0322
Multiple cross-site scripting XSS vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the 1 member parameter in member.php, 2 uid parameter in u2uadmin.php, 3 user parameter in editprofile.php, 4 an onmouseover event in an align tag when bbco...
PHP-NUKE 7.0 FINAL (and olders) sql injection
RusH security team | http://www.rsteam.ru o----------------------------= Advisory 16 =----------------------------o oxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxo o--------------------------------------------------------------------------o | Product: PHP-Nuke | |...
NXT-Howto.txt
+-------------------------------------------------------+ |BIND 8.2 - 8.2.2 Remote root Exploit How-To by E-Mind| +-------------------------------------------------------+ A What is a DNS? 1. How do I query a DNS? 2. How do I find a vulnerable DNS? B How do I edit DNS entries? 1. How do I find a...
